Files
homelab-v/k8s/infra/vpn/netbird/signal/deployment.yaml
T
2025-11-16 19:00:02 +01:00

61 lines
1.6 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: signal
namespace: netbird
spec:
strategy:
type: Recreate
selector:
matchLabels:
app.kubernetes.io/name: signal
template:
metadata:
labels:
app.kubernetes.io/name: signal
spec:
nodeSelector:
topology.kubernetes.io/zone: abel
securityContext:
seccompProfile:
type: RuntimeDefault
containers:
- name: signal
image: docker.io/netbirdio/signal:0.59.8 # renovate: docker=docker.io/netbirdio/signal
args: [ --port, $(PORT), --log-level, $(LOG_LEVEL), --log-file, console ]
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
runAsNonRoot: false
capabilities:
drop: [ ALL ]
add: [ NET_ADMIN, NET_RAW, PERFMON, BPF ]
envFrom:
- configMapRef:
name: signal-config
volumeMounts:
- name: signal
mountPath: /var/lib/netbird
ports:
- name: http
containerPort: 80
- name: legacy-grpc
containerPort: 10000
livenessProbe:
tcpSocket:
port: http
readinessProbe:
tcpSocket:
port: http
resources:
requests:
memory: 16Mi
cpu: 10m
limits:
memory: 64Mi
cpu: 2000m
volumes:
- name: signal
persistentVolumeClaim:
claimName: signal