Add management-platform Deployment manifest with viewer SA wired in
Source-of-truth manifest for the management-platform Deployment, with serviceAccountName: management-platform-viewer-sa added so the pod can authenticate for the read-only k8s cluster-view feature. Not yet applied to the cluster.
This commit is contained in:
70
k8s/management-platform-deployment.yaml
Normal file
70
k8s/management-platform-deployment.yaml
Normal file
@@ -0,0 +1,70 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: management-platform
|
||||
namespace: management-platform
|
||||
labels:
|
||||
app: management-platform
|
||||
app.kubernetes.io/managed-by: navitrends-pfe-migration
|
||||
owner: ameni-boukattaya
|
||||
spec:
|
||||
replicas: 1
|
||||
revisionHistoryLimit: 10
|
||||
strategy:
|
||||
type: Recreate
|
||||
selector:
|
||||
matchLabels:
|
||||
app: management-platform
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: management-platform
|
||||
app.kubernetes.io/managed-by: navitrends-pfe-migration
|
||||
owner: ameni-boukattaya
|
||||
spec:
|
||||
serviceAccountName: management-platform-viewer-sa
|
||||
containers:
|
||||
- name: management-platform
|
||||
image: management-platform:latest
|
||||
imagePullPolicy: Never
|
||||
ports:
|
||||
- containerPort: 5000
|
||||
protocol: TCP
|
||||
env:
|
||||
- name: HOSTNAME
|
||||
value: vmi3024229
|
||||
volumeMounts:
|
||||
- mountPath: /var/run/docker.sock
|
||||
name: docker-sock
|
||||
- mountPath: /root
|
||||
name: root-dir
|
||||
- mountPath: /etc/passwd
|
||||
name: etc-passwd
|
||||
readOnly: true
|
||||
- mountPath: /etc/shadow
|
||||
name: etc-shadow
|
||||
readOnly: true
|
||||
- mountPath: /app/config.py
|
||||
name: config-py
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: docker-sock
|
||||
hostPath:
|
||||
path: /var/run/docker.sock
|
||||
type: Socket
|
||||
- name: root-dir
|
||||
hostPath:
|
||||
path: /root
|
||||
type: Directory
|
||||
- name: etc-passwd
|
||||
hostPath:
|
||||
path: /etc/passwd
|
||||
type: File
|
||||
- name: etc-shadow
|
||||
hostPath:
|
||||
path: /etc/shadow
|
||||
type: File
|
||||
- name: config-py
|
||||
hostPath:
|
||||
path: /root/management-platform/config.py
|
||||
type: File
|
||||
Reference in New Issue
Block a user