Pod

# 프로덕션 레벨 Pod 스펙 (Deployment 권장)
apiVersion: v1
kind: Pod
metadata:
  name: api-server
  labels:
    app: api-server
    version: v1.2.3
    team: backend
  annotations:
    prometheus.io/scrape: "true"
    prometheus.io/port: "9090"
spec:
  # 보안 설정
  securityContext:
    runAsNonRoot: true
    runAsUser: 1000
    fsGroup: 2000

  # 초기화 컨테이너 (메인 컨테이너 실행 전)
  initContainers:
    - name: init-db-check
      image: busybox:1.36
      command: ['sh', '-c',
        'until nc -z postgres-service 5432; do
          echo "Waiting for database...";
          sleep 2;
        done']

  containers:
    # 메인 애플리케이션 컨테이너
    - name: api
      image: myregistry.io/api-server:v1.2.3
      imagePullPolicy: IfNotPresent

      ports:
        - name: http
          containerPort: 8080
        - name: metrics
          containerPort: 9090

      # 리소스 제한 (필수!)
      resources:
        requests:
          cpu: "250m"
          memory: "256Mi"
        limits:
          cpu: "1000m"
          memory: "512Mi"

      # 환경변수
      env:
        - name: NODE_ENV
          value: "production"
        - name: DB_HOST
          valueFrom:
            configMapKeyRef:
              name: db-config
              key: host
        - name: DB_PASSWORD
          valueFrom:
            secretKeyRef:
              name: db-secrets
              key: password

      # 헬스체크 (필수!)
      livenessProbe:
        httpGet:
          path: /health/live
          port: 8080
        initialDelaySeconds: 30
        periodSeconds: 10
        failureThreshold: 3

      readinessProbe:
        httpGet:
          path: /health/ready
          port: 8080
        initialDelaySeconds: 5
        periodSeconds: 5
        failureThreshold: 3

      # Graceful shutdown
      lifecycle:
        preStop:
          exec:
            command: ["/bin/sh", "-c", "sleep 10"]

      # 볼륨 마운트
      volumeMounts:
        - name: config-volume
          mountPath: /app/config
          readOnly: true
        - name: cache-volume
          mountPath: /app/cache

    # 사이드카 컨테이너 (로그 수집)
    - name: log-shipper
      image: fluent/fluent-bit:2.2
      resources:
        requests:
          cpu: "50m"
          memory: "64Mi"
        limits:
          cpu: "100m"
          memory: "128Mi"
      volumeMounts:
        - name: log-volume
          mountPath: /var/log/app

  volumes:
    - name: config-volume
      configMap:
        name: api-config
    - name: cache-volume
      emptyDir: {}
    - name: log-volume
      emptyDir: {}

  # 스케줄링 설정
  affinity:
    podAntiAffinity:
      preferredDuringSchedulingIgnoredDuringExecution:
        - weight: 100
          podAffinityTerm:
            labelSelector:
              matchLabels:
                app: api-server
            topologyKey: kubernetes.io/hostname

  terminationGracePeriodSeconds: 30
  restartPolicy: Always