apps/umami/resources/deployment.yaml
Peter Kurfer 6c7f7d4505
All checks were successful
Renovate / renovate (push) Successful in 21s
fix(umami): don't mount root FS read-only
2024-04-29 16:58:24 +02:00

58 lines
No EOL
1.3 KiB
YAML

---
apiVersion: apps/v1
kind: Deployment
metadata:
name: umami
spec:
replicas: 2
selector:
matchLabels:
app.kubernetes.io/name: umami
template:
metadata:
labels:
app.kubernetes.io/name: umami
spec:
containers:
- name: umami
image: umami
env:
- name: DATABASE_URL
valueFrom:
secretKeyRef:
name: default-cluster-pguser-umami
key: uri
envFrom:
- configMapRef:
name: umami-config
resources:
requests:
memory: "64Mi"
cpu: "50m"
limits:
memory: "128Mi"
cpu: "100m"
ports:
- containerPort: 3000
protocol: TCP
name: web
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: false
affinity:
nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 100
preference:
matchExpressions:
- key: kubernetes.io/arch
operator: In
values:
- arm64
securityContext:
runAsUser: 1000
runAsGroup: 1000
runAsNonRoot: true