Files
homelab-v/k8s/apps/dev/whoami/deployment.yaml
T

45 lines
981 B
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: whoami
namespace: whoami
labels:
app: whoami
spec:
replicas: 3
selector:
matchLabels:
app: whoami
template:
metadata:
namespace: whoami
labels:
app: whoami
spec:
securityContext:
runAsNonRoot: true
runAsUser: 999
runAsGroup: 999
fsGroup: 999
fsGroupChangePolicy: OnRootMismatch
seccompProfile:
type: RuntimeDefault
containers:
- name: whoami
image: ghcr.io/traefik/whoami:latest
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
capabilities:
drop: [ "ALL" ]
ports:
- name: http
containerPort: 80
resources:
requests:
cpu: 50m
memory: 12Mi
limits:
cpu: 1000m
memory: 24Mi