userservice.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: userservice
spec:
  selector:
    matchLabels:
      app: userservice
  template:
    metadata:
      labels:
        app: userservice
    spec:
      serviceAccountName: default
      terminationGracePeriodSeconds: 5
      containers:
        - name: userservice
          image: ghcr.io/nginxinc/bos-userservice:v1.3.0
          imagePullPolicy: Always
          volumeMounts:
            - name: keys
              mountPath: /root/.ssh
              readOnly: true
          ports:
            - name: http-server
              containerPort: 8080
          env:
            - name: VERSION
              value: v1.2.0
            - name: PORT
              value: "8080"
            - name: STATSD_HOST
              value: statsd-prometheus-statsd-exporter.prometheus.svc.cluster.local:9125
            - name: STATSD_PREFIX
              value: bos.userservice
            - name: OTEL_EXPORTER_OTLP_ENDPOINT
              valueFrom:
                configMapKeyRef:
                  name: tracing-config
                  key: OTEL_EXPORTER_OTLP_ENDPOINT
            - name: ENABLE_TRACING
              valueFrom:
                configMapKeyRef:
                  name: tracing-config
                  key: ENABLE_TRACING
            - name: ENABLE_METRICS
              valueFrom:
                configMapKeyRef:
                  name: tracing-config
                  key: ENABLE_METRICS
            - name: APP_NAME
              value: userservice
            - name: TOKEN_EXPIRY_SECONDS
              value: "3600"
            - name: PRIV_KEY_PATH
              value: /root/.ssh/privatekey
              # Valid levels are debug, info, warning, error, critical. If no valid level is set, defaults to info.
            - name: LOG_LEVEL
              value: info
          envFrom:
            - configMapRef:
                name: environment-config
            - configMapRef:
                name: accounts-db-config
          readinessProbe:
            httpGet:
              path: /z/health/readiness
              port: 8080
            initialDelaySeconds: 10
            periodSeconds: 5
            timeoutSeconds: 10
          livenessProbe:
            httpGet:
              path: /z/health/liveness
              port: 8080
            initialDelaySeconds: 10
            periodSeconds: 5
            timeoutSeconds: 10
      volumes:
        - name: keys
          secret:
            secretName: jwt-key
            items:
              - key: jwtRS256.key
                path: privatekey
              - key: jwtRS256.key.pub
                path: publickey
---
apiVersion: v1
kind: Service
metadata:
  name: userservice
spec:
  type: ClusterIP
  selector:
    app: userservice
  ports:
    - name: http
      port: 8080
      targetPort: 8080