Mobile-POC-Tester/deployment.yaml at main · TCP1P/Mobile-POC-Tester · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
apiVersion: v1
kind: Service
metadata:
  name: sekaibank-poc
  annotations:
    release_time: "2025-08-16T01:00:00Z"
spec:
  type: NodePort
  selector:
    category: misc
    challenge: sekaibank-poc
  ports:
  - name: https
    port: 5000
    targetPort: 5000
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-vpn-to-sekaibank-poc-adm
spec:
  podSelector:
    matchLabels:
      category: misc
      challenge: sekaibank-poc
  policyTypes:
  - Ingress
  ingress:
  - from:
    - ipBlock:
        cidr: 10.128.0.7/32 # vpn-gw
    ports:
    - protocol: TCP
      port: 65000
  - from:
    - ipBlock:
        cidr: 10.128.0.13/32 # haproxy
    ports:
    - protocol: TCP
      port: 5000
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: sekaibank-poc
spec:
  replicas: 1
  selector:
    matchLabels:
      category: misc
      challenge: sekaibank-poc
  template:
    metadata:
      labels:
        category: misc
        challenge: sekaibank-poc
        egress: allow
    spec:
      enableServiceLinks: false
      automountServiceAccountToken: false
      hostname: sekaibank-poc
      volumes:
      - name: kvm
        hostPath:
          path: /dev/kvm
          type: CharDevice

      containers:
      - name: device
        image: us-central1-docker.pkg.dev/sekaictf-462901/sekaictf/misc_sekaibank-transaction-poc-device:latest
        imagePullPolicy: Always
        securityContext:
          privileged: true
        volumeMounts:
        - mountPath: /dev/kvm
          name: kvm
        env:
        - name: MAX_MEMORY
          value: "8192"
        resources:
          requests:
            cpu: 1m
            memory: 1Mi
          limits:
            cpu: "8"
            memory: 8Gi
        ports:
        - name: http
          containerPort: 65000
        readinessProbe:
          exec:
            command:
              - sh
              - -c
              - test -f /app/device_ready && test "$(cat /app/device_ready)" = "1" || exit 1
          initialDelaySeconds: 30
          periodSeconds: 30
          timeoutSeconds: 10
          failureThreshold: 10

      - name: web
        image: us-central1-docker.pkg.dev/sekaictf-462901/sekaictf/misc_sekaibank-transaction-poc-web:latest
        imagePullPolicy: Always
        env:
        - name: DEBUG
          value: "false"
        - name: SECRET_KEY
          value: h6tF6QMw3C8Pz2kI
        - name: LOG_LEVEL
          value: INFO
        - name: WEB_PORT
          value: "5000"
        - name: MAX_FILE_SIZE
          value: "100"
        - name: UPLOAD_RETENTION_HOURS
          value: "1"
        - name: SCREENSHOT_RETENTION_HOURS
          value: "24"
        - name: MAX_QUEUE_SIZE
          value: "100"
        - name: QUEUE_CLEANUP_INTERVAL
          value: "3600"
        - name: QUEUE_RETENTION_HOURS
          value: "1"
        - name: ADB_TIMEOUT
          value: "30"
        - name: PROCESS_TIMEOUT
          value: "30"
        - name: APK_INSTALL_TIMEOUT
          value: "60"
        - name: ENABLE_POW
          value: "true"
        - name: POW_DIFFICULTY
          value: "250000"
        - name: ADB_HOST
          value: "127.0.0.1"
        - name: ADB_PORT
          value: "5037"
        resources:
          requests:
            cpu: 1m
            memory: 1Mi
          limits:
            cpu: "4"
            memory: 4Gi
        ports:
        - name: http
          containerPort: 5000
        readinessProbe:
          exec:
            command:
              - curl
              - -f
              - http://localhost:5000/
          initialDelaySeconds: 30
          periodSeconds: 30
          timeoutSeconds: 10
          failureThreshold: 10