blob: 7f88e059b7877f161517dbab5d5b2c6da3974d72 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
apiVersion: apps/v1
kind: Deployment
metadata:
name: hastebin
spec:
replicas: 1
selector:
matchLabels:
app: hastebin
template:
metadata:
labels:
app: hastebin
spec:
containers:
- name: hastebin
# Same image as https://github.com/seejohnrun/haste-server/blob/master/Dockerfile
image: node:14.8.0-stretch
command: [ "bash", "/init/init.sh" ]
imagePullPolicy: Always
resources:
requests:
cpu: 5m
memory: 70Mi
limits:
cpu: 100m
memory: 100Mi
ports:
- containerPort: 7777
securityContext:
readOnlyRootFilesystem: true
volumeMounts:
- name: hastebin-init-volume
mountPath: /init
- name: hastebin-code-volume
mountPath: /haste-server
- name: hastebin-npm-cache
mountPath: /home/node/
envFrom:
- secretRef:
name: hastebin-redis-password
- configMapRef:
name: hastebin-defaults
volumes:
- name: hastebin-init-volume
configMap:
name: hastebin-init
- name: hastebin-code-volume
emptyDir: {}
- name: hastebin-npm-cache
emptyDir: {}
securityContext:
fsGroup: 2000
runAsUser: 1000
runAsNonRoot: true
|