cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

keydb.yaml (1956B)

      1 apiVersion: apps/v1
      2 kind: Deployment
      3 metadata:
      4   name: bookwyrm-keydb
      5 spec:
      6   replicas: 1
      7   selector:
      8     matchLabels:
      9       app: bookwyrm-keydb
     10   template:
     11     metadata:
     12       labels:
     13         app: bookwyrm-keydb
     14     spec:
     15       automountServiceAccountToken: false
     16       securityContext:
     17         fsGroup: 999
     18       containers:
     19         - name: bookwyrm-keydb
     20           image: eqalpha/keydb:latest
     21           imagePullPolicy: Always
     22           command: ["keydb-server"]
     23           args: ["/etc/keydb/keydb.conf", "--protected-mode", "no"]
     24           ports:
     25             - containerPort: 6379
     26           securityContext:
     27             allowPrivilegeEscalation: false
     28             readOnlyRootFilesystem: false
     29             runAsNonRoot: true
     30             runAsUser: 999
     31             runAsGroup: 999
     32             capabilities:
     33               drop:
     34                 - ALL
     35             seccompProfile:
     36               type: RuntimeDefault
     37           resources:
     38             requests:
     39               memory: "128Mi"
     40               cpu: "100m"
     41             limits:
     42               memory: "256Mi"
     43               cpu: "500m"
     44           volumeMounts:
     45             - name: data
     46               mountPath: /data
     47           livenessProbe:
     48             exec:
     49               command:
     50                 - sh
     51                 - -c
     52                 - keydb-cli ping
     53             initialDelaySeconds: 10
     54             timeoutSeconds: 5
     55           readinessProbe:
     56             exec:
     57               command:
     58                 - sh
     59                 - -c
     60                 - keydb-cli ping
     61             initialDelaySeconds: 10
     62             timeoutSeconds: 5
     63       volumes:
     64         - name: data
     65           emptyDir: {}
     66       tolerations:
     67         - key: arch
     68           operator: Equal
     69           value: arm64
     70           effect: NoSchedule
     71 ---
     72 apiVersion: v1
     73 kind: Service
     74 metadata:
     75   name: bookwyrm-keydb
     76 spec:
     77   selector:
     78     app: bookwyrm-keydb
     79   ports:
     80     - name: redis
     81       protocol: TCP
     82       port: 6379
     83       targetPort: 6379