From 2273ab81272c30ddf280d6a59fda3f4688e529c2 Mon Sep 17 00:00:00 2001
From: Lan Liang <gcslyp@gmail.com>
Date: Sat, 30 Mar 2024 14:15:12 +0000
Subject: [PATCH] chore: update xline pod of ci,add probe,volume and security
 config.

Signed-off-by: Lan Liang <gcslyp@gmail.com>
---
 ci/artifacts/xline-pod.yaml | 48 +++++++++++++++++++++++++++++++------
 1 file changed, 41 insertions(+), 7 deletions(-)

diff --git a/ci/artifacts/xline-pod.yaml b/ci/artifacts/xline-pod.yaml
index 3c789fd4f..623f4aab0 100644
--- a/ci/artifacts/xline-pod.yaml
+++ b/ci/artifacts/xline-pod.yaml
@@ -6,12 +6,46 @@ metadata:
   namespace: kube-system
 spec:
   containers:
-    - name: xline
-      image: ghcr.io/xline-kv/xline:master
-      imagePullPolicy: IfNotPresent
-      command:
-        - /bin/sh
-        - -c
-        - xline --name node1 --members node1=kind-control-plane:2379 --data-dir /tmp/xline --storage-engine rocksdb --client-listen-urls=http://kind-control-plane:2379 --peer-listen-urls=http://kind-control-plane:2380,http://kind-control-plane:2381 --client-advertise-urls=http://kind-control-plane:2379 --peer-advertise-urls=http://kind-control-plane:2380,http://kind-control-plane:2381
+  - name: xline
+    image: ghcr.io/xline-kv/xline:master
+    imagePullPolicy: IfNotPresent
+    livenessProbe:
+      failureThreshold: 8
+      httpGet:
+        host: 127.0.0.1
+        path: /metrics
+        port: 9100
+        scheme: HTTP
+      initialDelaySeconds: 10
+      periodSeconds: 10
+      timeoutSeconds: 15
+    startupProbe:
+      failureThreshold: 24
+      httpGet:
+        host: 127.0.0.1
+        path: /metrics
+        port: 9100
+        scheme: HTTP
+      initialDelaySeconds: 10
+      periodSeconds: 10
+      timeoutSeconds: 15
+    volumeMounts:
+    - mountPath: /var/lib/xline
+      name: xline-data
+    command:
+    - xline
+    - --name node1
+    - --members node1=kind-control-plane:2379
+    - --data-dir /var/lib/xline
+    - --storage-engine rocksdb
+    - --client-listen-urls=http://kind-control-plane:2379
+    - --peer-listen-urls=http://kind-control-plane:2380,http://kind-control-plane:2381
+    - --client-advertise-urls=http://kind-control-plane:2379
+    - --peer-advertise-urls=http://kind-control-plane:2380,http://kind-control-plane:2381
   hostNetwork: true
+  priority: 2000001000
+  priorityClassName: system-node-critical
+  securityContext:
+    seccompProfile:
+      type: RuntimeDefault
 status: {}