Add management-platform Deployment manifest with viewer SA wired in

Source-of-truth manifest for the management-platform Deployment, with
serviceAccountName: management-platform-viewer-sa added so the pod can
authenticate for the read-only k8s cluster-view feature. Not yet applied
to the cluster.
This commit is contained in:
root
2026-08-14 03:15:07 +02:00
parent 47a2c43fdb
commit 3782241a88

View File

@@ -0,0 +1,70 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: management-platform
namespace: management-platform
labels:
app: management-platform
app.kubernetes.io/managed-by: navitrends-pfe-migration
owner: ameni-boukattaya
spec:
replicas: 1
revisionHistoryLimit: 10
strategy:
type: Recreate
selector:
matchLabels:
app: management-platform
template:
metadata:
labels:
app: management-platform
app.kubernetes.io/managed-by: navitrends-pfe-migration
owner: ameni-boukattaya
spec:
serviceAccountName: management-platform-viewer-sa
containers:
- name: management-platform
image: management-platform:latest
imagePullPolicy: Never
ports:
- containerPort: 5000
protocol: TCP
env:
- name: HOSTNAME
value: vmi3024229
volumeMounts:
- mountPath: /var/run/docker.sock
name: docker-sock
- mountPath: /root
name: root-dir
- mountPath: /etc/passwd
name: etc-passwd
readOnly: true
- mountPath: /etc/shadow
name: etc-shadow
readOnly: true
- mountPath: /app/config.py
name: config-py
readOnly: true
volumes:
- name: docker-sock
hostPath:
path: /var/run/docker.sock
type: Socket
- name: root-dir
hostPath:
path: /root
type: Directory
- name: etc-passwd
hostPath:
path: /etc/passwd
type: File
- name: etc-shadow
hostPath:
path: /etc/shadow
type: File
- name: config-py
hostPath:
path: /root/management-platform/config.py
type: File