apiVersion: v1
kind: Service
metadata:
  name: vmselect
  labels:
    app.kubernetes.io/name: vmselect
    app.kubernetes.io/component: vmselect
spec:
  ports:
  - port: 8481
    name: vmselect
  selector:
    app.kubernetes.io/name: vmselect
    app.kubernetes.io/component: vmselect

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: vmselect
  labels:
    app.kubernetes.io/name: vmselect
    app.kubernetes.io/component: vmselect
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: vmselect
      app.kubernetes.io/component: vmselect
  template:
    metadata:
      labels:
        app.kubernetes.io/name: vmselect
        app.kubernetes.io/component: vmselect
    spec:
      containers:
      - name: vmselect
        image: docker.io/victoriametrics/vmselect:v1.96.0-cluster
        args:
        - -envflag.enable=true
        - -envflag.prefix=vmselect_
        - -httpListenAddr=0.0.0.0:8481
        ports:
        - containerPort: 8481
          name: http
        readinessProbe: &probe
          httpGet:
            port: http
            path: /health
          periodSeconds: 60
        startupProbe:
          <<: *probe
          periodSeconds: 1
          successThreshold: 1
          failureThreshold: 30
          timeoutSeconds: 1
        securityContext:
          runAsNonRoot: true
          readOnlyRootFilesystem: true
        volumeMounts:
        - mountPath: /tmp
          name: tmp
          subPath: tmp
      securityContext:
        runAsGroup: 2093
        runAsNonRoot: true
        runAsUser: 2093
      volumes:
      - name: tmp
        emptyDir: {}