---
# deployment for staging, this connects the agent to the staging
# environment at http://lab.llvm.org:8014/
# the deployment for production is in a separate file
apiVersion: apps/v1
kind: Deployment
metadata:
  name: mlir-nvidia-staging
spec:
  # number of instances we want to run
  replicas: 1
  selector:
    matchLabels:
      app: mlir-nvidia-staging
  # define strategy for updating the images
  strategy:
    rollingUpdate:
      # do not deploy more replicas, as the buildbot server 
      # can't handle multiple workers with the same credentials
      maxSurge: 0
      # Allow to have 0 replicas during updates. 
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: mlir-nvidia-staging
    spec:
      containers:
      # the image and version we want to run   
      - image: gcr.io/sanitizer-bots/buildbot-mlir-nvidia:15
        name: mlir-nvidia-staging
        # set environment variables
        env:
          # connect to staging environment, running at port 9994 (instead of 9990)
          - name: BUILDBOT_PORT
            value: "9994"
        # reserve "<number of cores>-1" for this image, kubernetes also
        # needs <1 core for management tools
        resources:
          limits:
            cpu: "15"
            memory: 10Gi
            # also request to use the GPU
            # Note: this does not work in terraform at the moment
            nvidia.com/gpu: "1"
          requests:
            cpu: "15"
            memory: 10Gi
            nvidia.com/gpu: "1"
        volumeMounts:
        # mount the secrets into a folder  
        - mountPath: /secrets
          mountPropagation: None
          name: buildbot-token
      # specify the nood pool on which to deploy
      nodeSelector:
        pool: nvidia-16core-pool
      restartPolicy: Always
      volumes:
      # declare the secret as a volume so we can mount it
      - name: buildbot-token
        secret:
          optional: false
          secretName: password-mlir-nvidia
        # mount the secrets into a folder  
        - mountPath: /vol/secrets
          mountPropagation: None
          name: buildbot-token
        # storage for ccache
        - mountPath: /vol/ccache
          mountPropagation: None
          name: ccache-vol
        # work directory of buildbot
        - mountPath: /vol/buildbot
          mountPropagation: None
          name: buildbot-vol
      # specify the nood pool on which to deploy
      nodeSelector:
        pool: nvidia-16core-pool
      restartPolicy: Always
      volumes:
      # declare the secret as a volume so we can mount it
      - name: buildbot-token
        secret:
          optional: false
          secretName: password-mlir-nvidia
      - name: ccache-vol
        emptyDir: {}
      - name: buildbot-vol
        emptyDir: {}