sinker/manifests/deployment.yml at main · influxdata/sinker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app.kubernetes.io/name: sinker
  name: sinker
  namespace: sinker
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: sinker
  template:
    metadata:
      annotations:
        kubectl.kubernetes.io/default-container: sinker
      labels:
        app.kubernetes.io/name: sinker
    spec:
      containers:
        - args: [ ]
          env: [ ]
          image: us-docker.pkg.dev/influxdb2-artifacts/tubernetes/sinker:replace_me
          imagePullPolicy: Always
          livenessProbe:
            httpGet:
              path: /live
              port: admin
            timeoutSeconds: 2
          name: sinker
          ports:
            - containerPort: 8080
              name: admin
              protocol: TCP
          readinessProbe:
            httpGet:
              path: /ready
              port: admin
            timeoutSeconds: 2
          resources:
            limits:
              cpu: "8"
              memory: 3G
            requests:
              cpu: "2"
              memory: 3G
          securityContext:
            readOnlyRootFilesystem: true
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - "ALL"
          volumeMounts: [ ]
      imagePullSecrets:
        - name: gar-auth-sinker
      initContainers: [ ]
      #      priorityClassName: influxdata-app-critical # TODO
      securityContext:
        # Projects are configured by default to adhere to the "restricted" Pod Security Standards.
        # This ensures that deployments meet the highest security requirements for Kubernetes.
        # For more details, see: https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
        runAsNonRoot: true
        seccompProfile:
          type: RuntimeDefault
      serviceAccountName: sinker
      volumes: [ ]