diginext/deployment.podman.example.yaml at main · regicsolutions/diginext · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
# SERVICE CONFIGURATION
apiVersion: v1
kind: Service
metadata:
  name: diginext-svc
  namespace: diginext
  labels:
    app: diginext
spec:
  ports:
    - port: 6969
  selector:
    app: diginext
---
# POD DEPLOYMENT CONFIGURATION
apiVersion: apps/v1
kind: Deployment
metadata:
  name: diginext
  namespace: diginext
spec:
  replicas: 1
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
  selector:
    matchLabels:
      app: diginext
  template:
    metadata:
      labels:
        app: diginext
    spec:
      containers:
        - name: diginext
          image: digitop/diginext:latest
          ports:
            - containerPort: 6969
          # Security for PODMAN to run in rootless mode
          securityContext:
            priviledged: true
            runAsUser: 1000
            runAsGroup: 1000
          # Required for PODMAN to run (kubectl apply -f 05-podman-fuse-device-plugin.yaml)
          resources:
            limits:
              github.com/fuse: 1
          env:
            - name: TZ
              value: Asia/Ho_Chi_Minh
            - name: PORT
              value: "6969"
            - name: NODE_ENV
              value: production
            - name: CLI_MODE
              value: server
            - name: DEV_MODE
              value: "false"
            - name: BASE_URL
              value: https://api.dxup.dev
            - name: DB_URI
              value: # mongodb://...
            - name: JWT_SECRET
              value: # JWT_SECRET
            - name: JWT_EXPIRE_TIME
              value: 48h
            - name: GOOGLE_CLIENT_ID
              value: # GOOGLE_CLIENT_ID
            - name: GOOGLE_CLIENT_SECRET
              value: # GOOGLE_CLIENT_SECRET
            - name: BUILDER
              value: podman
          volumeMounts:
            - name: storage
              mountPath: /usr/app/storage
            - name: home
              mountPath: /usr/app
            # PODMAN
            # - name: podman-local
            #   mountPath: /home/podman/.local/share/containers
      volumes:
        # - name: podman-local
        #   hostPath:
        #     path: /home/dev/.local/share/containers
        - name: storage
          hostPath:
            path: /home/dev/diginext/storage
        - name: home
          hostPath:
            path: /home/dev/diginext/storage/home
---
# persistent volume