apps/hedgedoc/resources/deployment.yaml
Peter Kurfer ceca1f3bc9
All checks were successful
Renovate / renovate (push) Successful in 16s
feat: add linkwarden
2023-12-21 14:56:49 +01:00

74 lines
No EOL
1.8 KiB
YAML

---
apiVersion: apps/v1
kind: Deployment
metadata:
name: hedgedoc
spec:
selector:
matchLabels:
app.kubernetes.io/name: hedgedoc
template:
metadata:
labels:
app.kubernetes.io/name: hedgedoc
spec:
containers:
- name: hedgedoc
image: hedgedoc
env:
- name: CMD_DB_URL
valueFrom:
secretKeyRef:
name: default-cluster-pguser-hedgedoc
key: uri
- name: NODE_EXTRA_CA_CERTS
value: /certs/ca.crt
envFrom:
- secretRef:
name: hedgedoc-base-config
- secretRef:
name: hedgedoc-secret-config
ports:
- containerPort: 3000
protocol: TCP
name: web
volumeMounts:
- name: upload-tmp
mountPath: /tmp
- name: pg-certs
mountPath: /certs
readOnly: true
resources:
requests:
memory: "168Mi"
cpu: "50m"
limits:
memory: "256Mi"
cpu: "500m"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
securityContext:
runAsUser: 1000
runAsGroup: 1000
runAsNonRoot: true
affinity:
nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 1
preference:
matchExpressions:
- key: kubernetes.io/arch
operator: In
values:
- arm64
volumes:
- name: upload-tmp
emptyDir:
sizeLimit: 500Mi
- name: pg-certs
secret:
secretName: default-cluster-cluster-cert