chore: add rate-limit, set rollingupdate, add resource req/limit

Informasjonsforvaltning · Sep 30, 2024 · d06d9e5 · d06d9e5
1 parent c035529
commit d06d9e5
Show file tree

Hide file tree

Showing 4 changed files with 37 additions and 1 deletion.
diff --git a/deploy/base/deployment-ai-project-service.yaml b/deploy/base/deployment-ai-project-service.yaml
@@ -11,7 +11,7 @@ spec:
     matchLabels:
       app: ai-project-service
   strategy:
-    type: Recreate
+    type: RollingUpdate
   template:
     metadata:
       labels:
@@ -25,6 +25,12 @@ spec:
           imagePullPolicy: Always
           ports:
             - containerPort: 8080
+          resources:
+            limits:
+              memory: 20Mi
+            requests:
+              cpu: 5m
+              memory: 20Mi
           livenessProbe:
             httpGet:
               path: /ping

diff --git a/deploy/demo/ingress.yaml b/deploy/demo/ingress.yaml
@@ -3,6 +3,16 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: ai-project-service
+  annotations:
+    nginx.ingress.kubernetes.io/limit-rpm: '6'
+    nginx.ingress.kubernetes.io/limit-burst-multiplier: '2'
+    nginx.ingress.kubernetes.io/limit-whitelist: '10.0.0.0/8'
+    nginx.ingress.kubernetes.io/server-snippet: |
+      server_tokens off;
+      location ~ ^/(ping|ready|prometheus) {
+        deny all;
+        return 404;
+      }
 spec:
   ingressClassName: nginx
   rules:

diff --git a/deploy/prod/ingress.yaml b/deploy/prod/ingress.yaml
@@ -3,6 +3,16 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: ai-project-service
+  annotations:
+    nginx.ingress.kubernetes.io/limit-rpm: '6'
+    nginx.ingress.kubernetes.io/limit-burst-multiplier: '2'
+    nginx.ingress.kubernetes.io/limit-whitelist: '10.0.0.0/8'
+    nginx.ingress.kubernetes.io/server-snippet: |
+      server_tokens off;
+      location ~ ^/(ping|ready|prometheus) {
+        deny all;
+        return 404;
+      }
 spec:
   ingressClassName: nginx
   rules:

diff --git a/deploy/staging/ingress.yaml b/deploy/staging/ingress.yaml
@@ -3,6 +3,16 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: ai-project-service
+  annotations:
+    nginx.ingress.kubernetes.io/limit-rpm: '6'
+    nginx.ingress.kubernetes.io/limit-burst-multiplier: '2'
+    nginx.ingress.kubernetes.io/limit-whitelist: '10.0.0.0/8'
+    nginx.ingress.kubernetes.io/server-snippet: |
+      server_tokens off;
+      location ~ ^/(ping|ready|prometheus) {
+        deny all;
+        return 404;
+      }
 spec:
   ingressClassName: nginx
   rules: