op-scim-bridge-gw.yaml

apiVersion: serving.knative.dev/v1
kind: Service
metadata:
  name: op-scim-bridge
spec:
  template:
    metadata:
      annotations:
        autoscaling.knative.dev/minScale: "1"
        autoscaling.knative.dev/maxScale: "1"
        run.googleapis.com/cpu-throttling: "false"
        run.googleapis.com/startup-cpu-boost: "true"
    spec:
      containers:
        - name: scim
          image: 1password/scim:v2.9.9
          ports:
            - name: http1
              containerPort: 3002
          env:
            - name: OP_WORKSPACE_CREDENTIALS
              value: /home/opuser/.op/workspace-credentials/.json
            - name: OP_WORKSPACE_SETTINGS
              value: /home/opuser/.op/workspace-settings/.json
          resources:
            limits:
              cpu: 500m
              memory: 512Mi
          volumeMounts:
            - name: credentials
              mountPath: /home/opuser/.op
            - name: workspace-credentials
              mountPath: /home/opuser/.op/workspace-credentials
            - name: workspace-settings
              mountPath: /home/opuser/.op/workspace-settings
        - name: redis
          image: redis
          args:
            - --maxmemory 256mb
            - --maxmemory-policy volatile-lru
            - --save ""
          resources:
            limits:
              cpu: 500m
              memory: 512Mi
      volumes:
        - name: credentials
          secret:
            secretName: scimsession
            items:
              - key: latest
                path: scimsession
        - name: workspace-credentials
          secret:
            secretName: workspace-credentials
            items:
              - key: latest
                path: .json
        - name: workspace-settings
          secret:
            secretName: workspace-settings
            items:
              - key: latest
                path: .json