Files
sama/kube/dcos/deployment.yaml
T

108 lines
3.5 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: dcos
labels:
helm.sh/chart: dcos-0.1.0
app.kubernetes.io/name: dcos
app.kubernetes.io/instance: dcos
app.kubernetes.io/version: "1.0.0"
app.kubernetes.io/managed-by: Helm
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/name: dcos
app.kubernetes.io/instance: dcos
template:
metadata:
labels:
helm.sh/chart: dcos-0.1.0
app.kubernetes.io/name: dcos
app.kubernetes.io/instance: dcos
app.kubernetes.io/version: "1.0.0"
app.kubernetes.io/managed-by: Helm
spec:
imagePullSecrets:
- name: ghcr-credentials
serviceAccountName: dcos
securityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
containers:
- name: dcos
image: "ghcr.io/celesrenata/dcos:dev"
imagePullPolicy: Always
ports:
- name: http
containerPort: 8080
protocol: TCP
env:
- name: DCOS_DATA_DIR
value: /app/data/memory_store
- name: DCOS_CONFIG_DIR
value: /app/config
- name: DCOS_LOG_LEVEL
value: "INFO"
# ──────────────────────────────────────────
# Database connection credentials
# Managed via dcos-db-secret
# ──────────────────────────────────────────
# Cross-namespace DNS requires FQDN (postgresql-rw is in postgresql-service namespace)
- name: DCOS_PG_HOST
value: "postgresql-rw.postgresql-service.svc.cluster.local"
- name: DCOS_PG_PORT
value: "5432"
- name: DCOS_PG_USER
value: "celes"
- name: DCOS_PG_DB
value: "dcos"
- name: DCOS_PG_PASSWORD
valueFrom:
secretKeyRef:
name: dcos-db-secret
key: POSTGRES_PASSWORD
# Cross-namespace DNS requires FQDN (redis-master is in redis-service namespace)
- name: DCOS_REDIS_HOST
value: "redis-master.redis-service.svc.cluster.local"
- name: DCOS_REDIS_PORT
value: "6379"
- name: DCOS_REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: dcos-db-secret
key: REDIS_PASSWORD
- name: DCOS_MINIO_ENDPOINT
value: "minio-crawler-console:9090"
- name: DCOS_MINIO_ACCESS_KEY
valueFrom:
secretKeyRef:
name: dcos-db-secret
key: MINIO_ACCESS_KEY
- name: DCOS_MINIO_SECRET_KEY
valueFrom:
secretKeyRef:
name: dcos-db-secret
key: MINIO_SECRET_KEY
resources:
limits:
cpu: "4"
memory: "4Gi"
requests:
cpu: "1"
memory: "1Gi"
volumeMounts:
- name: memory-store
mountPath: /app/data/memory_store
- name: config
mountPath: /app/config
readOnly: true
volumes:
- name: memory-store
persistentVolumeClaim:
claimName: dcos-memory-pvc
- name: config
persistentVolumeClaim:
claimName: dcos-config-pvc