prod/deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: ci-results-archiver
  labels:
    app: ci-results-archiver
spec:
  replicas: 1
  selector:
    matchLabels:
      app: ci-results-archiver
  # Default RollingUpdate strategy doesn't work with 1 replica deployments.
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: ci-results-archiver
    spec:
      containers:
      - name: ci-results-archiver
        image: gcr.io/google.com/chromeos-lab/ci_results_archiver@sha256:c8fbf87478b7632c13e358736455cf8dc83473307a68d9177774bcd0b75b8295
        env:
        - name: PYTHONPATH
          value: "/ci_results_archiver"
        - name: GOOGLE_APPLICATION_CREDENTIALS
          value: "/secrets/service-account-keys/service_account.json"
        command: ["python"]
        args: [
          "/ci_results_archiver/ci_results_archiver/main.py",
          "-c=/mysql-config/config",
          "--run-soon",
          "--decrypt-creds",
        ]
        volumeMounts:
        - name: service-account-keys
          mountPath: '/secrets/service-account-keys'
          readOnly: true
        - name: mysql-config
          mountPath: '/mysql-config'
          readOnly: true
        - name: tsmon-config
          mountPath: '/etc/chrome-infra'
          readOnly: true
      volumes:
      - name: service-account-keys
        secret:
          secretName: service-account-keys
      - name: mysql-config
        secret:
          secretName: mysql-config
      - name: tsmon-config
        secret:
          secretName: tsmon-config