kind: ControllerRevision
apiVersion: apps/v1
metadata:
    name: gitlab-gitaly-5dd56f4678
    namespace: gitlab
    selfLink: >-
        /apis/apps/v1/namespaces/gitlab/controllerrevisions/gitlab-gitaly-5dd56f4678
    uid: 99f027f3-398b-11ea-b115-42010a8001d6
    resourceVersion: '2016432'
    creationTimestamp: '2020-01-18T00:43:53Z'
    labels:
        app: gitaly
        controller.kubernetes.io/hash: 5dd56f4678
        release: gitlab
    ownerReferences:
        -
            apiVersion: apps/v1
            kind: StatefulSet
            name: gitlab-gitaly
            uid: 999dceb7-398b-11ea-b115-42010a8001d6
            controller: true
            blockOwnerDeletion: true
data:
    spec:
        template:
            $patch: replace
            metadata:
                annotations:
                    checksum/config: >-
                        164952b2fb54733dd4a2c06a3f1429e87c5410ecfcd72236bb546ddea4bf277a
                creationTimestamp: null
                labels:
                    app: gitaly
                    release: gitlab
            spec:
                affinity:
                    podAntiAffinity:
                        preferredDuringSchedulingIgnoredDuringExecution:
                            -
                                podAffinityTerm:
                                    labelSelector:
                                        matchLabels:
                                            app: gitaly
                                            release: gitlab
                                    topologyKey: kubernetes.io/hostname
                                weight: 1
                containers:
                    -
                        env:
                            -
                                name: CONFIG_TEMPLATE_DIRECTORY
                                value: /etc/gitaly/templates
                            -
                                name: CONFIG_DIRECTORY
                                value: /etc/gitaly
                            -
                                name: GITALY_CONFIG_FILE
                                value: /etc/gitaly/config.toml
                            -
                                name: SSL_CERT_DIR
                                value: /etc/ssl/certs
                            -
                                name: GITALY_PROMETHEUS_LISTEN_ADDR
                                value: ':9236'
                            -
                                name: POD_NAME
                                valueFrom:
                                    fieldRef:
                                        apiVersion: v1
                                        fieldPath: metadata.name
                        image: >-
                            registry.gitlab.com/gitlab-org/build/cng/gitaly:v1.77.1
                        imagePullPolicy: IfNotPresent
                        livenessProbe:
                            exec:
                                command:
                                    - /scripts/healthcheck
                            failureThreshold: 3
                            initialDelaySeconds: 30
                            periodSeconds: 10
                            successThreshold: 1
                            timeoutSeconds: 3
                        name: gitaly
                        ports:
                            -
                                containerPort: 8075
                                protocol: TCP
                            -
                                containerPort: 9236
                                protocol: TCP
                        readinessProbe:
                            exec:
                                command:
                                    - /scripts/healthcheck
                            failureThreshold: 3
                            initialDelaySeconds: 10
                            periodSeconds: 10
                            successThreshold: 1
                            timeoutSeconds: 3
                        resources:
                            requests:
                                cpu: 100m
                                memory: 200Mi
                        terminationMessagePath: /dev/termination-log
                        terminationMessagePolicy: File
                        volumeMounts:
                            -
                                mountPath: /etc/ssl/certs/
                                name: etc-ssl-certs
                                readOnly: true
                            -
                                mountPath: /etc/gitaly/templates
                                name: gitaly-config
                            -
                                mountPath: /etc/gitlab-secrets
                                name: gitaly-secrets
                                readOnly: true
                            -
                                mountPath: /home/git/repositories
                                name: repo-data
                dnsPolicy: ClusterFirst
                initContainers:
                    -
                        image: >-
                            registry.gitlab.com/gitlab-org/build/cng/alpine-certificates:20171114-r3
                        imagePullPolicy: IfNotPresent
                        name: certificates
                        resources:
                            requests:
                                cpu: 50m
                        terminationMessagePath: /dev/termination-log
                        terminationMessagePolicy: File
                        volumeMounts:
                            -
                                mountPath: /etc/ssl/certs
                                name: etc-ssl-certs
                    -
                        command:
                            - sh
                            - /config/configure
                        image: 'busybox:latest'
                        imagePullPolicy: Always
                        name: configure
                        resources:
                            requests:
                                cpu: 50m
                        terminationMessagePath: /dev/termination-log
                        terminationMessagePolicy: File
                        volumeMounts:
                            -
                                mountPath: /config
                                name: gitaly-config
                                readOnly: true
                            -
                                mountPath: /init-config
                                name: init-gitaly-secrets
                                readOnly: true
                            -
                                mountPath: /init-secrets
                                name: gitaly-secrets
                restartPolicy: Always
                schedulerName: default-scheduler
                securityContext:
                    fsGroup: 1000
                    runAsUser: 1000
                terminationGracePeriodSeconds: 30
                volumes:
                    -
                        configMap:
                            defaultMode: 420
                            name: gitlab-gitaly
                        name: gitaly-config
                    -
                        emptyDir:
                            medium: Memory
                        name: gitaly-secrets
                    -
                        name: init-gitaly-secrets
                        projected:
                            defaultMode: 288
                            sources:
                                -
                                    secret:
                                        items:
                                            -
                                                key: token
                                                path: gitaly_token
                                        name: gitlab-gitaly-secret
                                -
                                    secret:
                                        items:
                                            -
                                                key: secret
                                                path: .gitlab_shell_secret
                                        name: gitlab-gitlab-shell-secret
                                -
                                    secret:
                                        items:
                                            -
                                                key: secret
                                                path: redis_password
                                        name: gitlab-redis-secret
                    -
                        emptyDir:
                            medium: Memory
                        name: etc-ssl-certs
revision: 1

