foxhunt/k8s/trading-service.yaml

# =============================================================================
# FOXHUNT TRADING SERVICE - ULTRA-PERFORMANCE KUBERNETES DEPLOYMENT
# =============================================================================
# This manifest deploys the Trading Service with specialized performance
# optimizations for 14ns latency requirements

apiVersion: v1
kind: Namespace
metadata:
  name: foxhunt-trading
  labels:
    app.kubernetes.io/name: foxhunt
    app.kubernetes.io/component: trading
    performance-tier: ultra-high

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: trading-service
  namespace: foxhunt-trading
  labels:
    app: trading-service
    version: v1
    performance-tier: ultra-high
spec:
  replicas: 2  # Active-standby for HA
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0  # Zero-downtime deployment
  selector:
    matchLabels:
      app: trading-service
  template:
    metadata:
      labels:
        app: trading-service
        version: v1
        performance-tier: ultra-high
      annotations:
        # Performance annotations
        scheduler.alpha.kubernetes.io/critical-pod: "true"
        cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
    spec:
      # ULTRA-PERFORMANCE NODE AFFINITY
      nodeSelector:
        performance-tier: ultra-high
        workload-type: trading
      
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: performance-tier
                operator: In
                values: ["ultra-high"]
              - key: kubernetes.io/arch
                operator: In
                values: ["amd64"]
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
          - weight: 100
            podAffinityTerm:
              labelSelector:
                matchExpressions:
                - key: app
                  operator: In
                  values: ["trading-service"]
              topologyKey: kubernetes.io/hostname

      # PERFORMANCE-CRITICAL CONFIGURATION
      hostNetwork: true  # Direct host networking for minimal latency
      dnsPolicy: ClusterFirstWithHostNet
      
      # PRIVILEGED ACCESS FOR HARDWARE OPTIMIZATION
      securityContext:
        runAsNonRoot: false
        runAsUser: 0
        fsGroup: 0
      
      # PRIORITY AND PREEMPTION
      priorityClassName: system-critical
      
      # RESOURCE TOPOLOGY
      topologySpreadConstraints:
      - maxSkew: 1
        topologyKey: kubernetes.io/hostname
        whenUnsatisfiable: DoNotSchedule
        labelSelector:
          matchLabels:
            app: trading-service

      containers:
      - name: trading-service
        image: foxhunt/trading-service:latest
        imagePullPolicy: Always
        
        # ULTRA-PERFORMANCE SECURITY CONTEXT
        securityContext:
          privileged: true  # Required for RDTSC hardware access
          allowPrivilegeEscalation: true
          readOnlyRootFilesystem: false
          capabilities:
            add:
            - SYS_NICE      # CPU scheduling priority
            - SYS_TIME      # High-resolution timers
            - SYS_RAWIO     # Raw I/O operations
            - NET_RAW       # Raw network access
            - IPC_LOCK      # Memory locking
            - SYS_RESOURCE  # Resource limits
        
        # CPU AFFINITY AND RESOURCE LIMITS
        resources:
          requests:
            memory: "8Gi"
            cpu: "4"
            hugepages-2Mi: "2Gi"
          limits:
            memory: "8Gi"  # Hard limit to prevent swap
            cpu: "4"       # Dedicated CPU cores
            hugepages-2Mi: "2Gi"
        
        # PERFORMANCE-CRITICAL ENVIRONMENT
        env:
        - name: RUST_LOG
          value: "error"  # Minimal logging for performance
        - name: MALLOC_CONF
          value: "background_thread:false,dirty_decay_ms:0,muzzy_decay_ms:0"
        - name: CPU_AFFINITY_CORES
          value: "0,1,2,3"  # Pinned to specific cores
        - name: GOMAXPROCS
          value: "4"
        - name: OMP_NUM_THREADS
          value: "4"
        
        # VOLUME MOUNTS FOR PERFORMANCE
        volumeMounts:
        - name: hugepages
          mountPath: /dev/hugepages
        - name: proc
          mountPath: /host/proc
          readOnly: true
        
        # gRPC PORT
        ports:
        - containerPort: 50051
          name: grpc
          protocol: TCP
        
        # KUBERNETES PROBES (lightweight for performance)
        livenessProbe:
          tcpSocket:
            port: 50051
          initialDelaySeconds: 10
          periodSeconds: 30
          timeoutSeconds: 5
          failureThreshold: 3
        
        readinessProbe:
          tcpSocket:
            port: 50051
          initialDelaySeconds: 5
          periodSeconds: 10
          timeoutSeconds: 3
          failureThreshold: 1

      # PERFORMANCE-OPTIMIZED VOLUMES
      volumes:
      - name: hugepages
        emptyDir:
          medium: HugePages-2Mi
      - name: proc
        hostPath:
          path: /proc
          type: Directory

      # SCHEDULING CONSTRAINTS
      tolerations:
      - key: "performance-tier"
        operator: "Equal"
        value: "ultra-high"
        effect: "NoSchedule"
      - key: "node.kubernetes.io/not-ready"
        operator: "Exists"
        effect: "NoExecute"
        tolerationSeconds: 30

---
apiVersion: v1
kind: Service
metadata:
  name: trading-service
  namespace: foxhunt-trading
  labels:
    app: trading-service
  annotations:
    # Performance service annotations
    service.beta.kubernetes.io/aws-load-balancer-type: "nlb"
    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "tcp"
spec:
  type: ClusterIP  # Internal service only
  sessionAffinity: ClientIP  # Session stickiness for performance
  selector:
    app: trading-service
  ports:
  - name: grpc
    port: 50051
    targetPort: 50051
    protocol: TCP

---
apiVersion: policy/v1
kind: PodDisruptionBudget
metadata:
  name: trading-service-pdb
  namespace: foxhunt-trading
spec:
  minAvailable: 1  # Always keep at least one instance running
  selector:
    matchLabels:
      app: trading-service

---
apiVersion: scheduling.k8s.io/v1
kind: PriorityClass
metadata:
  name: system-critical
value: 1000000
globalDefault: false
description: "Ultra-high priority for critical trading services"