-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathdeployment.yaml
62 lines (62 loc) · 1.65 KB
/
deployment.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
apiVersion: apps/v1
kind: Deployment
metadata:
name: kuard
annotations:
# I am ignoring poddisruptionbudgets, networkpolicy and podantiaffinity since they don't apply to the demo use-case
kube-score/ignore: deployment-has-poddisruptionbudget,pod-networkpolicy,deployment-has-host-podantiaffinity
spec:
selector: {}
progressDeadlineSeconds: 600
revisionHistoryLimit: 10
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
spec:
containers:
- image: kuard
securityContext:
capabilities:
drop:
- all
privileged: false
readOnlyRootFilesystem: true
imagePullPolicy: Always
name: kuard-amd64
ports:
- containerPort: 8080
protocol: TCP
name: http
readinessProbe:
httpGet:
path: /ready
port: http
livenessProbe:
httpGet:
path: /healthy
port: http
resources:
limits:
cpu: 200m
memory: 100Mi
ephemeral-storage: 10Mi
requests:
cpu: 100m
memory: 50Mi
ephemeral-storage: 10Mi
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
runAsGroup: 65534 # nobody
runAsNonRoot: true
fsGroup: 65534 # nobody
runAsUser: 65534 # nobody
seccompProfile:
type: RuntimeDefault
terminationGracePeriodSeconds: 30