Add management-platform Deployment manifest with viewer SA wired in
Source-of-truth manifest for the management-platform Deployment, with serviceAccountName: management-platform-viewer-sa added so the pod can authenticate for the read-only k8s cluster-view feature. Not yet applied to the cluster.
This commit is contained in:
70
k8s/management-platform-deployment.yaml
Normal file
70
k8s/management-platform-deployment.yaml
Normal file
@@ -0,0 +1,70 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: management-platform
|
||||||
|
namespace: management-platform
|
||||||
|
labels:
|
||||||
|
app: management-platform
|
||||||
|
app.kubernetes.io/managed-by: navitrends-pfe-migration
|
||||||
|
owner: ameni-boukattaya
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
revisionHistoryLimit: 10
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: management-platform
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: management-platform
|
||||||
|
app.kubernetes.io/managed-by: navitrends-pfe-migration
|
||||||
|
owner: ameni-boukattaya
|
||||||
|
spec:
|
||||||
|
serviceAccountName: management-platform-viewer-sa
|
||||||
|
containers:
|
||||||
|
- name: management-platform
|
||||||
|
image: management-platform:latest
|
||||||
|
imagePullPolicy: Never
|
||||||
|
ports:
|
||||||
|
- containerPort: 5000
|
||||||
|
protocol: TCP
|
||||||
|
env:
|
||||||
|
- name: HOSTNAME
|
||||||
|
value: vmi3024229
|
||||||
|
volumeMounts:
|
||||||
|
- mountPath: /var/run/docker.sock
|
||||||
|
name: docker-sock
|
||||||
|
- mountPath: /root
|
||||||
|
name: root-dir
|
||||||
|
- mountPath: /etc/passwd
|
||||||
|
name: etc-passwd
|
||||||
|
readOnly: true
|
||||||
|
- mountPath: /etc/shadow
|
||||||
|
name: etc-shadow
|
||||||
|
readOnly: true
|
||||||
|
- mountPath: /app/config.py
|
||||||
|
name: config-py
|
||||||
|
readOnly: true
|
||||||
|
volumes:
|
||||||
|
- name: docker-sock
|
||||||
|
hostPath:
|
||||||
|
path: /var/run/docker.sock
|
||||||
|
type: Socket
|
||||||
|
- name: root-dir
|
||||||
|
hostPath:
|
||||||
|
path: /root
|
||||||
|
type: Directory
|
||||||
|
- name: etc-passwd
|
||||||
|
hostPath:
|
||||||
|
path: /etc/passwd
|
||||||
|
type: File
|
||||||
|
- name: etc-shadow
|
||||||
|
hostPath:
|
||||||
|
path: /etc/shadow
|
||||||
|
type: File
|
||||||
|
- name: config-py
|
||||||
|
hostPath:
|
||||||
|
path: /root/management-platform/config.py
|
||||||
|
type: File
|
||||||
Reference in New Issue
Block a user