blob: 6eb88ab8054b95607d4bcaa926858b3a0099a567 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
apiVersion: apps/v1
kind: Deployment
metadata:
name: redis
namespace: databases
spec:
replicas: 1
strategy:
type: Recreate
selector:
matchLabels:
app: redis
template:
metadata:
labels:
app: redis
spec:
containers:
- name: redis
image: redis:latest
command:
- redis-server
args:
- /config/redis.conf
- --requirepass
- $(REDIS_PASSWORD)
imagePullPolicy: Always
resources:
requests:
cpu: 50m
memory: 100Mi
limits:
cpu: 100m
memory: 150Mi
ports:
- containerPort: 6379
envFrom:
- secretRef:
name: redis-credentials
volumeMounts:
- name: redis-data-volume
mountPath: /data # Must match the dir in the redis.conf
- name: redis-config-volume
mountPath: /config
securityContext:
readOnlyRootFilesystem: true
volumes:
- name: redis-data-volume
persistentVolumeClaim:
claimName: redis-storage
- name: redis-config-volume
configMap:
name: redis-conf
securityContext:
fsGroup: 1000
runAsUser: 1000
runAsNonRoot: true
|
