Ultradesu
7e7813bfe0
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 6s
150 lines
3.9 KiB
YAML
150 lines
3.9 KiB
YAML
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: mtproxy-classic
|
|
labels:
|
|
app: mtproxy-classic
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: mtproxy-classic
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: mtproxy-classic
|
|
annotations:
|
|
reloader.stakater.com/auto: "true"
|
|
spec:
|
|
nodeSelector:
|
|
homelab.hexor.cy/exposure: external
|
|
automountServiceAccountToken: false
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
runAsGroup: 65532
|
|
fsGroup: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
containers:
|
|
- name: telemt
|
|
image: ghcr.io/telemt/telemt@sha256:b311c20596213a3941dcd11f499be982de74f554eecfffe57fab51c1bf80d50a
|
|
imagePullPolicy: IfNotPresent
|
|
workingDir: /run/telemt
|
|
args: ["/app/config.toml"]
|
|
ports:
|
|
- name: proxy
|
|
containerPort: 30443
|
|
hostPort: 30443
|
|
protocol: TCP
|
|
- name: metrics
|
|
containerPort: 9090
|
|
protocol: TCP
|
|
readinessProbe:
|
|
tcpSocket:
|
|
port: proxy
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
limits:
|
|
memory: 256Mi
|
|
securityContext:
|
|
readOnlyRootFilesystem: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /app/config.toml
|
|
subPath: classic.toml
|
|
readOnly: true
|
|
- name: workdir
|
|
mountPath: /run/telemt
|
|
volumes:
|
|
- name: config
|
|
secret:
|
|
secretName: mtproxy-config
|
|
defaultMode: 0444
|
|
items:
|
|
- key: classic.toml
|
|
path: classic.toml
|
|
- name: workdir
|
|
emptyDir:
|
|
medium: Memory
|
|
sizeLimit: 4Mi
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: mtproxy-tls
|
|
labels:
|
|
app: mtproxy-tls
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: mtproxy-tls
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: mtproxy-tls
|
|
annotations:
|
|
reloader.stakater.com/auto: "true"
|
|
spec:
|
|
nodeSelector:
|
|
homelab.hexor.cy/exposure: external
|
|
automountServiceAccountToken: false
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
runAsGroup: 65532
|
|
fsGroup: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
containers:
|
|
- name: telemt
|
|
image: ghcr.io/telemt/telemt@sha256:b311c20596213a3941dcd11f499be982de74f554eecfffe57fab51c1bf80d50a
|
|
imagePullPolicy: IfNotPresent
|
|
workingDir: /run/telemt
|
|
args: ["/app/config.toml"]
|
|
ports:
|
|
- name: proxy
|
|
containerPort: 30444
|
|
hostPort: 30444
|
|
protocol: TCP
|
|
- name: metrics
|
|
containerPort: 9090
|
|
protocol: TCP
|
|
readinessProbe:
|
|
tcpSocket:
|
|
port: proxy
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
limits:
|
|
memory: 256Mi
|
|
securityContext:
|
|
readOnlyRootFilesystem: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /app/config.toml
|
|
subPath: tls.toml
|
|
readOnly: true
|
|
- name: workdir
|
|
mountPath: /run/telemt
|
|
volumes:
|
|
- name: config
|
|
secret:
|
|
secretName: mtproxy-config
|
|
defaultMode: 0444
|
|
items:
|
|
- key: tls.toml
|
|
path: tls.toml
|
|
- name: workdir
|
|
emptyDir:
|
|
medium: Memory
|
|
sizeLimit: 4Mi
|