78 lines
2.1 KiB
YAML
78 lines
2.1 KiB
YAML
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: amnezia-fellow
|
|
labels:
|
|
app: amnezia-fellow
|
|
spec:
|
|
replicas: 1
|
|
strategy:
|
|
type: Recreate
|
|
selector:
|
|
matchLabels:
|
|
app: amnezia-fellow
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: amnezia-fellow
|
|
spec:
|
|
serviceAccountName: amnezia-fellow
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
|
containers:
|
|
- name: amnezia-fellow
|
|
image: ultradesu/amnezia-fellow:latest
|
|
imagePullPolicy: Always
|
|
args:
|
|
- "--listen"
|
|
- "0.0.0.0:8000"
|
|
ports:
|
|
- name: http
|
|
containerPort: 8000
|
|
protocol: TCP
|
|
env:
|
|
- name: AMNEZIA_FELLOW_DATABASE_URL
|
|
value: "sqlite:///data/amnezia-fellow.sqlite3?mode=rwc"
|
|
- name: AMNEZIA_FELLOW_K8S_NAMESPACE
|
|
value: "amnezia"
|
|
- name: AMNEZIA_FELLOW_K8S_CLIENTS_SECRET
|
|
value: "amneziawg-clients"
|
|
- name: AMNEZIA_FELLOW_K8S_CLIENTS_SECRET_KEY
|
|
value: "peers.conf"
|
|
- name: AMNEZIA_FELLOW_K8S_SERVER_SECRET
|
|
value: "amneziawg-server"
|
|
- name: AMNEZIA_FELLOW_K8S_ENDPOINTS_SECRET
|
|
value: "amneziawg-endpoints"
|
|
- name: AMNEZIA_FELLOW_VPN_CLIENT_CIDR
|
|
value: "10.8.0.0/16"
|
|
- name: AMNEZIA_FELLOW_VPN_MTU
|
|
value: "1376"
|
|
readinessProbe:
|
|
tcpSocket:
|
|
port: http
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 3
|
|
livenessProbe:
|
|
tcpSocket:
|
|
port: http
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 30
|
|
timeoutSeconds: 5
|
|
resources:
|
|
requests:
|
|
cpu: "50m"
|
|
memory: "128Mi"
|
|
limits:
|
|
cpu: "500m"
|
|
memory: "512Mi"
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: /data
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: amnezia-fellow-data
|