ci / docker (push) Successful in 13s
Rust (axum + sqlx) API and worker sharing a Postgres-backed job queue (SKIP LOCKED, heartbeat, reaper, typed statuses), S3 storage with derived keys and a fully private bucket, OIDC photographer login with per-request allowlist checks, client share links with argon2 passwords and lockout, cookie-based image authorization with sliding expiry, hand-rolled spec-compliant streaming ZIP downloads with exact Content-Length, React + Vite gallery frontend, single Docker image, Helm chart for external S3 + Postgres, and Gitea CI. Co-Authored-By: Claude <noreply@anthropic.com>
35 lines
1.1 KiB
YAML
35 lines
1.1 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "photos.fullname" . }}-worker
|
|
labels:
|
|
{{- include "photos.labels" . | nindent 4 }}
|
|
app.kubernetes.io/component: worker
|
|
spec:
|
|
replicas: {{ .Values.worker.replicas }}
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: photos
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/component: worker
|
|
template:
|
|
metadata:
|
|
labels:
|
|
{{- include "photos.labels" . | nindent 8 }}
|
|
app.kubernetes.io/component: worker
|
|
spec:
|
|
containers:
|
|
- name: worker
|
|
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
|
command: ["worker"]
|
|
env:
|
|
{{- include "photos.env" . | nindent 12 }}
|
|
- name: WORKER_CONCURRENCY
|
|
value: {{ .Values.worker.concurrency | quote }}
|
|
envFrom:
|
|
- secretRef:
|
|
name: {{ include "photos.secretName" . }}
|
|
resources:
|
|
{{- toYaml .Values.worker.resources | nindent 12 }}
|