diff options
| author |  Joe Banks <[email protected]> | 2024-04-15 11:26:52 +0100 |
|---|---|---|
| committer | Joe Banks <[email protected]> | 2024-04-15 11:26:52 +0100 |
| commit | 23f7ec4f17dde7761619ef29634dd177b292d742 (patch) | |
| tree | be7744708c4c70f00e070f45acfe46efa636430d /kubernetes/namespaces/tooling/policy-bot/deployment.yaml | |
| parent | Remove unused services (diff) | |
Move services to tooling namespace
Diffstat (limited to 'kubernetes/namespaces/tooling/policy-bot/deployment.yaml')
| -rw-r--r-- | kubernetes/namespaces/tooling/policy-bot/deployment.yaml | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/kubernetes/namespaces/tooling/policy-bot/deployment.yaml b/kubernetes/namespaces/tooling/policy-bot/deployment.yaml new file mode 100644 index 0000000..bf4541c --- /dev/null +++ b/kubernetes/namespaces/tooling/policy-bot/deployment.yaml @@ -0,0 +1,44 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: policy-bot + namespace: tooling +spec: + replicas: 1 + selector: + matchLabels: + app: policy-bot + template: + metadata: + labels: + app: policy-bot + spec: + containers: + - name: policy-bot + image: palantirtechnologies/policy-bot:latest + imagePullPolicy: Always + resources: + requests: + cpu: 50m + memory: 50Mi + limits: + cpu: 100m + memory: 100Mi + ports: + - containerPort: 8080 + volumeMounts: + - mountPath: /secrets + name: policy-bot-config + securityContext: + readOnlyRootFilesystem: true + envFrom: + - secretRef: + name: policy-bot-secrets + volumes: + - name: policy-bot-config + configMap: + name: policy-bot-defaults + securityContext: + fsGroup: 2000 + runAsUser: 1000 + runAsNonRoot: true |