fix lint

kubernetes/aks/apps/nachet/base/nachet-ingress.yaml

@@ -20,7 +20,7 @@ metadata:
       auth_request_set $auth_resp_err $upstream_http_x_vouch_err;
       auth_request_set $auth_resp_failcount $upstream_http_x_vouch_failcount;
     nginx.ingress.kubernetes.io/custom-http-errors: "403"
-    nginx.ingress.kubernetes.io/default-backend: "default-nginx-backend" # Overrides the global default backend
+    nginx.ingress.kubernetes.io/default-backend: "default-nginx-backend"  # Overrides the global default backend
 spec:
   ingressClassName: nginx
   tls:
@@ -38,13 +38,6 @@ spec:
                 name: nachet-backend-svc
                 port:
                   number: 8080
-          - path: /rcnn-detector(/|$)(.*)
-            pathType: ImplementationSpecific
-            backend:
-              service:
-                name: nachet-rcnn-detector-svc
-                port:
-                  number: 12380
 ---
 # For more information check https://github.com/nginxinc/kubernetes-ingress/issues/323
 apiVersion: networking.k8s.io/v1

kubernetes/aks/apps/nachet/base/nachet-rcnn-model-deployment.yaml

@@ -0,0 +1,100 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nachet-rcnn-detector
+  namespace: nachet
+spec:
+  replicas: 2
+  revisionHistoryLimit: 3
+  selector:
+    matchLabels:
+      app: nachet-rcnn-detector
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 1
+  template:
+    metadata:
+      labels:
+        app: nachet-rcnn-detector
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 3000
+        fsGroup: 2000
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: app
+                    operator: In
+                    values:
+                      - nachet-rcnn-detector
+              topologyKey: "kubernetes.io/hostname"
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: kubernetes.io/role
+                    operator: In
+                    values:
+                      - agent
+      containers:
+        - name: nachet-rcnn-detector
+          image: ghcr.io/ai-cfia/nachet-backend:129-Autologin-uuid # This is a placeholder
+          imagePullPolicy: Always
+          command: ["/bin/sh", "-c"]
+          args: ['hypercorn -b :8080 app:app']
+          envFrom:
+            - secretRef:
+                name: nachet-rcnn-detector-secrets
+          ports:
+            - containerPort: 8080
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: 8080
+            initialDelaySeconds: 60
+            periodSeconds: 10
+          resources:
+            requests:
+              cpu: "250m"
+              memory: "1Gi"
+            limits:
+              cpu: "500m"
+              memory: "2Gi"
+          securityContext:
+            readOnlyRootFilesystem: true
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+
+---
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: nachet-rcnn-detector-pdb
+  namespace: nachet
+spec:
+  minAvailable: 1
+  selector:
+    matchLabels:
+      app: nachet-rcnn-detector
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: nachet-rcnn-detector-svc
+  namespace: nachet
+spec:
+  clusterIP: None
+  selector:
+    app: nachet-rcnn-detector
+  ports:
+    - protocol: TCP
+      port: 8080