apiVersion: v1
kind: Service
metadata:
  name: vminsert
  labels:
    app.kubernetes.io/name: vminsert
    app.kubernetes.io/component: vminsert
spec:
  ports:
  - port: 8480
    name: vminsert
  selector:
    app.kubernetes.io/name: vminsert
    app.kubernetes.io/component: vminsert

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: vminsert
  labels:
    app.kubernetes.io/name: vminsert
    app.kubernetes.io/component: vminsert
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: vminsert
      app.kubernetes.io/component: vminsert
  template:
    metadata:
      labels:
        app.kubernetes.io/name: vminsert
        app.kubernetes.io/component: vminsert
    spec:
      containers:
      - name: vminsert
        image: quay.io/victoriametrics/vminsert:v1.96.0-cluster
        args:
        - -envflag.enable=true
        - -envflag.prefix=vminsert_
        - -httpListenAddr=0.0.0.0:8480
        ports:
        - containerPort: 8480
          name: http
        readinessProbe: &probe
          httpGet:
            port: http
            path: /health
          periodSeconds: 60
        startupProbe:
          <<: *probe
          periodSeconds: 1
          successThreshold: 1
          failureThreshold: 30
          timeoutSeconds: 1
        securityContext:
          runAsNonRoot: true
          readOnlyRootFilesystem: true
        volumeMounts:
        - mountPath: /tmp
          name: tmp
          subPath: tmp
      securityContext:
        runAsGroup: 2093
        runAsNonRoot: true
        runAsUser: 2093
      volumes:
      - name: tmp
        emptyDir: {}