debuginfod: almost ready for -stg

- changed deploymentconfig to a template, to adapt to stg-sensitive PV name
- tweaked debuginfod command line
  - to match expected PV mount points
  - to reduce verbosity
  - to specify scanning parallelism
- specified a requested cpu (8) & ram (24GB) allocation

playbooks/openshift-apps/debuginfod.yml

@@ -34,11 +34,6 @@
     file: service.yml
     objectname: service.yml
 
-  - role: openshift/object
-    app: debuginfod
-    file: deploymentconfig.yml
-    objectname: deploymentconfig.yml
-
   - role: openshift/object
     app: debuginfod
     file: storage.yml
@@ -55,3 +50,8 @@
     app: debuginfod
     buildname: debuginfod-build
     objectname: debuginfod-build
+
+  - role: openshift/object
+    app: debuginfod
+    template: deploymentconfig.yml
+    objectname: deploymentconfig.yml

roles/openshift-apps/debuginfod/templates/deploymentconfig.yml

@@ -25,22 +25,26 @@ spec:
       - name: debuginfod
         image: debuginfod:latest
         command: ["/usr/bin/debuginfod",
-                  "-vvvvv",
+                  "-vvv",
-                  "-d", "/tmp/db.sqlite",
+                  "-d", "/var/cache/debuginfod/db.sqlite",
+                  "-c", "8",
                   "-t", "3600",
                   "-g", "604800",
-                  "-R", "/mnt",
+                  # exclude signed etc. variants, just want original RPMs
-                  "-I", "zsh.*\\.fc(30|31|32|33|34|35)\\..*\\.rpm$"]
+                  "-X", "/data/",
+                  "-R", "/mnt/koji/packages",
+                  "-I", "\\.fc(30|31|32|33|34|35)\\..*\\.rpm$"]
         ports:
         - containerPort: 8002
         resources:
           requests:
-            memory: 1000Mi
+            memory: 24000Mi
+            cpu: 8000m
         volumeMounts:
-         - name: debuginfod-volume
+         - name: debuginfod-volume{{ '-stg' if env == 'staging' else '' }}
            mountPath: /var/cache/debuginfod
            readOnly: false
-         - name: koji-volume
+         - name: fedora-koji
            mountPath: /mnt
            readOnly: true
         readinessProbe: