deployment.yaml

#
# This will create a deployment of the fake-server app
# that will live on https://fake-server.loadtest.identitysandbox.gov.
# The loadtest.identitysandbox.gov dns zone needs to be created
# and delegated from identitysandbox.gov in the account this is going
# to be created in, and an SSL cert for fake-server.loadtest.identitysandbox.gov
# needs to be created and have it's magic auth stuff put in the loadtest
# subdomain.  I did this by hand, but the rest happens automagically,
# as the fake-server hostname will be created by the external-dns
# service in the cluster, and the cert will be autodiscovered by the
# aws-load-balancer-controller.
# Logs should be going into cloudwatch.
#

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: fake-server
  labels:
    app: fake-server
spec:
  selector:
    matchLabels:
      app: fake-server
  template:
    metadata:
      labels:
        app: fake-server
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/path: "/metrics"
        prometheus.io/port: "5555"
    spec:
      containers:
        - name: fake-server
          image: 894947205914.dkr.ecr.us-west-2.amazonaws.com/logindotgov/identity-fake-server:1.3.0
          env:
            - name: AAMVA_SECURITY_TOKEN_DELAY
              value: "0.3645"
            - name: AAMVA_AUTHENTICATION_TOKEN_DELAY
              value: "0.3706"
            - name: AAMVA_VERIFICATION_DELAY
              value: "3.4252"
            - name: ACUANT_CREATE_DOCUMENT_DELAY
              value: "0.3916"
            - name: ACUANT_UPLOAD_IMAGE_DELAY
              value: "1.5201"
            - name: ACUANT_FACEMATCH_DELAY
              value: "4"
            - name: ACUANT_GET_RESULTS_DELAY
              value: "8.3772"
            - name: LEXISNEXIS_INSTANT_VERIFY_DELAY
              value: "0.9257"
            - name: LEXISNEXIS_PHONE_FINDER_DELAY
              value: "3.3355"
            - name: LEXISNEXIS_TRUE_ID_DELAY
              value: "26.0"
            - name: USPS_IPPAAS_GETPROOFINGRESULTS_OUTCOME
              value: "missing_enrollment_code"
            - name: NEW_RELIC_LICENSE_KEY
              valueFrom:
                secretKeyRef:
                  name: newrelic-license
                  key: newrelic-license
                  optional: false
            - name: NEW_RELIC_APP_NAME
              value: fake-server.loadtest.identitysandbox.gov
            - name: NEW_RELIC_HOST
              value: gov-collector.newrelic.com
            - name: RACK_TIMEOUT_SERVICE_TIMEOUT
              value: "120000"
          resources:
            requests:
              cpu: "75m"
              memory: "512Mi"
            limits:
              memory: "512Mi"
          ports:
            - containerPort: 5555
      tolerations:
        - key: "spot"
          operator: "Equal"
          value: "true"
          effect: "NoSchedule"

---
apiVersion: v1
kind: Service
metadata:
  name: fake-server
spec:
  ports:
    - port: 5555
      targetPort: 5555
      protocol: TCP
  type: NodePort
  selector:
    app: fake-server

---
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: fake-server
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: fake-server
  minReplicas: 1
  maxReplicas: 100
  metrics:
    - type: Resource
      resource:
        name: cpu
        target:
          type: Utilization
          averageUtilization: 80
  # - type: Pods
  #   pods:
  #     metric:
  #       name: http_connections
  #     target:
  #       type: AverageValue
  #       averageValue: 10

---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: fake-server
  annotations:
    alb.ingress.kubernetes.io/scheme: internet-facing
    alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
    alb.ingress.kubernetes.io/healthcheck-path: /health
    external-dns.alpha.kubernetes.io/hostname: fake-server.loadtest.identitysandbox.gov
spec:
  ingressClassName: alb
  tls:
    - hosts:
        - fake-server.loadtest.identitysandbox.gov
  rules:
    - http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: fake-server
                port:
                  number: 5555