bouncer/misc/k8s/kustomization/base/resources/bouncer-server/resources/deployment.yaml
William Petit 7de166765b
All checks were successful
Cadoles/bouncer/pipeline/head This commit looks good
feat(k8s): use secret as shared source for admin private key
2024-03-28 15:53:40 +01:00

52 lines
1.3 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: bouncer-server
labels:
app: bouncer-server
app.kubernetes.io/name: bouncer-server
app.kubernetes.io/part-of: bouncer
spec:
replicas: 3
selector:
matchLabels:
app: bouncer-server
template:
metadata:
labels:
app: bouncer-server
app.kubernetes.io/name: bouncer-server
app.kubernetes.io/part-of: bouncer
spec:
containers:
- name: bouncer-server
image: bouncer
securityContext:
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
command:
[
"bouncer",
"-c",
"/etc/bouncer/config.yml",
"server",
"proxy",
"run",
]
imagePullPolicy: Always
envFrom:
- configMapRef:
name: bouncer-server-env
resources: {}
ports:
- name: bouncer-server
containerPort: 8080
volumeMounts:
- mountPath: /etc/bouncer/
name: bouncer-server-config
volumes:
- name: bouncer-server-config
configMap:
name: bouncer-server-config