apiVersion: v1
kind: Namespace
metadata:
  name: slow-cooker
  labels:
    workload.edge.ncr.com: platform
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: slow-cooker
  namespace: slow-cooker
  labels:
    workload.edge.ncr.com: platform
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: slow-cooker
rules:
- resources: ["deployments", "daemonsets"]
  apiGroups: ["apps", "extensions"]
  verbs: ["list", "get", "patch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: slow-cooker
roleRef:
  name: slow-cooker
  kind: ClusterRole
  apiGroup: rbac.authorization.k8s.io
subjects:
- name: slow-cooker
  namespace: slow-cooker
  kind: ServiceAccount
---
apiVersion: batch/v1
kind: Job
metadata:
  name: slow-cooker
  namespace: slow-cooker
spec:
  template:
    metadata:
      labels:
        app: slow-cooker
      annotations:
        linkerd.io/inject: enabled
    spec:
      restartPolicy: OnFailure
      serviceAccountName: slow-cooker
      initContainers:
      - name: wait
        image: bzl://hack/deps:alpine_container_push
        command: ["/bin/sh", "-c", "sleep 60"]
      containers:
      - name: slow-cooker
        image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/slow-cooker@sha256:2e0c503624b0f5b778f7780317a6456247cbb1e639c4d2e4897759bc42453016
        args:
        - --interval=60s
        - --qps=20
        - --concurrency=5
        - --iterations=60
        - "@/etc/config/urllist"
        resources:
          limits:
            cpu: "300m"
            memory: 300Mi
          requests:
            cpu: 50m
            memory: 50Mi
        volumeMounts:
        - name: urllist
          mountPath: /etc/config/
      volumes:
      - name: urllist
        configMap:
          name: urllist
      imagePullSecrets:
      - name: edge-docker-pull-secret
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: urllist
  namespace: slow-cooker
data:
  urllist: |
    http://nginx.slow-cooker.svc.cluster.local
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: nginx-deployment
  namespace: slow-cooker
  labels:
    app: nginx
spec:
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      labels:
        app: nginx
      annotations:
        linkerd.io/inject: enabled
    spec:
      containers:
      - name: nginx
        image: bzl://hack/deps:nginx_container_push
        resources:
          limits:
            cpu: "100m"
            memory: 100Mi
          requests:
            cpu: 50m
            memory: 50Mi
---
apiVersion: v1
kind: Service
metadata:
  name: nginx
  namespace: slow-cooker
spec:
  type: ClusterIP
  selector:
    app: nginx
  ports:
  - protocol: TCP
    port: 80
    targetPort: 80
  internalTrafficPolicy: Local
---
apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: nginx-server
  namespace: slow-cooker
spec:
  port: 80
  podSelector:
    matchLabels:
      app: nginx
  proxyProtocol: HTTP/1
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: ngnx-server-auth
  namespace: slow-cooker
spec:
  client:
    meshTLS:
      serviceAccounts:
      - name: slow-cooker
        namespace: slow-cooker
  server:
    name: nginx-server