node.yaml 4.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147
  1. ---
  2. apiVersion: v1
  3. kind: Service
  4. metadata:
  5. name: guardian
  6. labels:
  7. app: guardian
  8. spec:
  9. ports:
  10. - port: 8999
  11. name: p2p
  12. protocol: UDP
  13. - port: 7070
  14. name: public-grpc
  15. protocol: TCP
  16. - port: 7071
  17. name: public-rest
  18. protocol: TCP
  19. clusterIP: None
  20. selector:
  21. app: guardian
  22. ---
  23. apiVersion: apps/v1
  24. kind: StatefulSet
  25. metadata:
  26. name: guardian
  27. spec:
  28. selector:
  29. matchLabels:
  30. app: guardian
  31. serviceName: guardian
  32. replicas: 5
  33. updateStrategy:
  34. # The StatefulSet rolling update strategy is rather dumb, and updates one pod after another.
  35. # If we want blue-green deployments, we should use a Deployment instead.
  36. type: RollingUpdate
  37. template:
  38. metadata:
  39. labels:
  40. app: guardian
  41. spec:
  42. terminationGracePeriodSeconds: 0
  43. volumes:
  44. # mount shared between containers for runtime state
  45. - name: node-rundir
  46. emptyDir: {}
  47. - name: node-keysdir
  48. secret:
  49. secretName: node-bigtable-key
  50. optional: true
  51. items:
  52. - key: bigtable-key.json
  53. path: bigtable-key.json
  54. containers:
  55. - name: guardiand
  56. image: guardiand-image
  57. volumeMounts:
  58. - mountPath: /run/node
  59. name: node-rundir
  60. - mountPath: /tmp/mounted-keys
  61. name: node-keysdir
  62. env:
  63. - name: BIGTABLE_EMULATOR_HOST
  64. value: bigtable-emulator:8086
  65. - name: PUBSUB_EMULATOR_HOST
  66. value: pubsub-emulator:8085
  67. command:
  68. # Uncomment this to enable in-place debugging using dlv
  69. # (not suitable for regular development since the process will no longer restart on its own)
  70. #
  71. # - /dlv
  72. # - --listen=0.0.0.0:2345
  73. # - --accept-multiclient
  74. # - --headless=true
  75. # - --api-version=2
  76. # - --continue=true
  77. # - exec
  78. - /guardiand
  79. # - --
  80. - node
  81. - --ethRPC
  82. - ws://eth-devnet:8545
  83. - --bscRPC
  84. - ws://eth-devnet2:8545
  85. - --polygonRPC
  86. - ws://eth-devnet:8545
  87. - --avalancheRPC
  88. - ws://eth-devnet:8545
  89. - --fantomRPC
  90. - ws://eth-devnet:8545
  91. - --oasisRPC
  92. - ws://eth-devnet:8545
  93. - --terraWS
  94. - ws://terra-terrad:26657/websocket
  95. - --terraLCD
  96. - http://terra-terrad:1317
  97. - --terraContract
  98. - terra18vd8fpwxzck93qlwghaj6arh4p7c5n896xzem5
  99. - --algorandRPC
  100. - http://localhost:4001
  101. - --algorandToken
  102. - aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
  103. - --algorandContract
  104. - aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
  105. - --solanaContract
  106. - Bridge1p5gheXUvJ6jGWGeCsgPKgnE3YgdGKRVCMY9o
  107. - --solanaWS
  108. - ws://solana-devnet:8900
  109. - --solanaRPC
  110. - http://solana-devnet:8899
  111. - --unsafeDevMode
  112. - --guardianKey
  113. - /tmp/bridge.key
  114. - --publicRPC
  115. - "[::]:7070"
  116. - --publicWeb
  117. - "[::]:7071"
  118. - --adminSocket
  119. - /tmp/admin.sock
  120. - --dataDir
  121. - /tmp/data
  122. # - --logLevel=debug
  123. securityContext:
  124. capabilities:
  125. add:
  126. # required for syscall.Mlockall
  127. - IPC_LOCK
  128. readinessProbe:
  129. httpGet:
  130. port: 6060
  131. path: /readyz
  132. ports:
  133. - containerPort: 8999
  134. name: p2p
  135. protocol: UDP
  136. - containerPort: 6060
  137. name: pprof
  138. protocol: TCP
  139. - containerPort: 7070
  140. name: public-grpc
  141. protocol: TCP
  142. - containerPort: 7071
  143. name: public-grpcweb
  144. protocol: TCP
  145. - containerPort: 2345
  146. name: debugger
  147. protocol: TCP