All checks were successful
Build and Deploy Backend / build-and-deploy (push) Successful in 3m38s
83 lines
2.3 KiB
YAML
83 lines
2.3 KiB
YAML
apiVersion: apps/v1
|
||
kind: Deployment
|
||
metadata:
|
||
name: hw-ws-service
|
||
labels:
|
||
app: hw-ws-service
|
||
spec:
|
||
replicas: 2
|
||
selector:
|
||
matchLabels:
|
||
app: hw-ws-service
|
||
# WebSocket 连接有状态,滚动更新时使用 Recreate 或 RollingUpdate + 优雅关闭
|
||
strategy:
|
||
type: RollingUpdate
|
||
rollingUpdate:
|
||
maxUnavailable: 0 # 始终保持至少 2 个 Pod 可用
|
||
maxSurge: 1
|
||
template:
|
||
metadata:
|
||
labels:
|
||
app: hw-ws-service
|
||
spec:
|
||
# 优雅关闭总时限:90s(服务内部等待 80s,留 10s 缓冲)
|
||
terminationGracePeriodSeconds: 90
|
||
|
||
containers:
|
||
- name: hw-ws-service
|
||
image: ${CI_REGISTRY_IMAGE}/hw-ws-service:latest
|
||
imagePullPolicy: Always
|
||
ports:
|
||
- name: ws
|
||
containerPort: 8888
|
||
protocol: TCP
|
||
|
||
env:
|
||
- name: HW_WS_HOST
|
||
value: "0.0.0.0"
|
||
- name: HW_WS_PORT
|
||
value: "8888"
|
||
- name: HW_RTC_BACKEND_URL
|
||
# 集群内部直接访问 rtc-backend Service,不走公网
|
||
value: "http://rtc-backend:8000"
|
||
|
||
lifecycle:
|
||
preStop:
|
||
exec:
|
||
# 等待 5s 让 LB/Ingress 将流量从本 Pod 摘除,再开始关闭
|
||
command: ["/bin/sh", "-c", "sleep 5"]
|
||
|
||
# 就绪探针:TCP 握手成功才接流量
|
||
readinessProbe:
|
||
tcpSocket:
|
||
port: 8888
|
||
initialDelaySeconds: 3
|
||
periodSeconds: 5
|
||
failureThreshold: 3
|
||
|
||
# 存活探针:连续失败 3 次才重启(避免短暂抖动误杀)
|
||
livenessProbe:
|
||
tcpSocket:
|
||
port: 8888
|
||
initialDelaySeconds: 10
|
||
periodSeconds: 15
|
||
failureThreshold: 3
|
||
|
||
# 资源限制(根据实际负载调整)
|
||
resources:
|
||
requests:
|
||
cpu: "100m"
|
||
memory: "128Mi"
|
||
limits:
|
||
cpu: "500m"
|
||
memory: "512Mi"
|
||
|
||
# 优先调度到不同节点,避免单点故障
|
||
topologySpreadConstraints:
|
||
- maxSkew: 1
|
||
topologyKey: kubernetes.io/hostname
|
||
whenUnsatisfiable: DoNotSchedule
|
||
labelSelector:
|
||
matchLabels:
|
||
app: hw-ws-service
|