diff --git a/oceanbox/Petimeter/production.yaml b/oceanbox/Petimeter/production.yaml new file mode 100644 index 00000000..5b3b1380 --- /dev/null +++ b/oceanbox/Petimeter/production.yaml @@ -0,0 +1,145 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/instance: production + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: petimeter + app.kubernetes.io/version: 1.10.0 + helm.sh/chart: petimeter-0.2.0 + name: production-petimeter + namespace: oceanbox +--- +apiVersion: v1 +data: + appsettings.json: | + ewogICAgIm9pZGMiOiB7CiAgICAgICAgImlzc3VlciI6ICJodHRwczovL2lkcC5vY2Vhbm + JveC5pby9kZXgiLAogICAgICAgICJhdXRob3JpemF0aW9uX2VuZHBvaW50IjogImh0dHBz + Oi8vaWRwLm9jZWFuYm94LmlvL2RleC9hdXRoIiwKICAgICAgICAidG9rZW5fZW5kcG9pbn + QiOiAiaHR0cHM6Ly9pZHAub2NlYW5ib3guaW8vZGV4L3Rva2VuIiwKICAgICAgICAiandr + c191cmkiOiAiaHR0cHM6Ly9pZHAub2NlYW5ib3guaW8vZGV4L2tleXMiLAogICAgICAgIC + J1c2VyaW5mb19lbmRwb2ludCI6ICJodHRwczovL2lkcC5vY2VhbmJveC5pby9kZXgvdXNl + cmluZm8iLAogICAgICAgICJkZXZpY2VfYXV0aG9yaXphdGlvbl9lbmRwb2ludCI6ICJodH + RwczovL2lkcC5vY2VhbmJveC5pby9kZXgvZGV2aWNlL2NvZGUiLAogICAgICAgICJjbGll + bnRJZCI6ICJwZXRpbWV0ZXIiLAogICAgICAgICJjbGllbnRTZWNyZXQiOiAia2tyS28zbW + 1tc2VNbm9yZjlxdzNla2xlZmtvT0tGTnMiLAogICAgICAgICJzY29wZXMiOiBbCiAgICAg + ICAgICAgICJvcGVuaWQiLAogICAgICAgICAgICAiZW1haWwiLAogICAgICAgICAgICAib2 + ZmbGluZV9hY2Nlc3MiLAogICAgICAgICAgICAicHJvZmlsZSIKICAgICAgICBdCiAgICB9 + LAogICAgInNzbyI6IHsKICAgICAgICAiY29va2llRG9tYWluIjogIi5vY2VhbmJveC5pby + IsCiAgICAgICAgInNpZ25lZE91dFJlZGlyZWN0VXJpIjogImh0dHBzOi8vaWRwLm9jZWFu + Ym94LmlvL2RleC9zdGF0aWMvbG9nb3V0Lmh0bWwiLAogICAgICAgICJyZWRpcyI6ICJyZW + Rpcy1tYXN0ZXIsdXNlcj1kZWZhdWx0LHBhc3N3b3JkPXltTDRkbE9CdlUiLAogICAgICAg + ICJhcHBEb21haW4iOiAiYXRsYW50aXMiLAogICAgICAgICJkYXRhUHJvdGVjdGlvbktleX + MiOiAiRGF0YVByb3RlY3Rpb24tS2V5cyIKICAgIH0sCiAgICAiYWxsb3dlZE9yaWdpbnMi + OiBbCiAgICAgICAgImh0dHBzOi8vYXRsYW50aXMuc3ZjLm9jZWFuYm94LmlvIgogICAgXS + wKICAgICJsb2dTZXJ2aWNlIiA6ICJodHRwczovL3NlcS5vY2VhbmJveC5pbyIsCiAgICAi + bG9nQXBpS2V5IjogIldtWnBsRGVGb3hJSHBKUTVCaURrIiwKICAgICJkZXBsb3lLZXkiOi + AicHJvZCIKfQ== +kind: Secret +metadata: + name: production-petimeter-appsettings + namespace: oceanbox +type: Opaque +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/instance: production + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: petimeter + app.kubernetes.io/version: 1.10.0 + helm.sh/chart: petimeter-0.2.0 + name: production-petimeter + namespace: oceanbox +spec: + ports: + - name: http + port: 8085 + protocol: TCP + targetPort: http + selector: + app.kubernetes.io/instance: production + app.kubernetes.io/name: petimeter + type: ClusterIP +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/instance: production + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: petimeter + app.kubernetes.io/version: 1.10.0 + helm.sh/chart: petimeter-0.2.0 + name: production-petimeter + namespace: oceanbox +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: production + app.kubernetes.io/name: petimeter + template: + metadata: + annotations: + dapr.io/app-id: production-petimeter + dapr.io/app-port: "8000" + dapr.io/config: tracing + dapr.io/enabled: "true" + labels: + app.kubernetes.io/instance: production + app.kubernetes.io/name: petimeter + spec: + containers: + - env: + - name: LOG_LEVEL + value: "4" + image: registry.gitlab.com/oceanbox/petimeter:v1.9.0 + imagePullPolicy: IfNotPresent + livenessProbe: + httpGet: + path: /healthz + port: http + name: petimeter + ports: + - containerPort: 8085 + name: http + protocol: TCP + readinessProbe: + httpGet: + path: /healthz + port: http + resources: {} + securityContext: + capabilities: + drop: + - ALL + readOnlyRootFilesystem: false + runAsNonRoot: true + runAsUser: 1000 + volumeMounts: + - mountPath: /data + name: data + - mountPath: /app/appsettings.json + name: appsettings + readOnly: true + subPath: appsettings.json + - mountPath: /app/acl.json + name: acl + readOnly: true + subPath: acl.json + imagePullSecrets: + - name: gitlab-pull-secret + securityContext: + fsGroup: 2000 + serviceAccountName: production-petimeter + volumes: + - emptyDir: {} + name: data + - name: appsettings + secret: + secretName: production-petimeter-appsettings + - configMap: + name: petimeter-acl + name: acl