sample-app-deployment/deployment.yaml at 934f52d3eab48d82a43dc7f92463285d705d55cc · gitopsbook/sample-app-deployment · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
apiVersion: apps/v1
kind: Deployment
metadata:
  name: sample-app
spec:
  replicas: 1
  revisionHistoryLimit: 3
  selector:
    matchLabels:
      app: sample-app
  template:
    metadata:
      labels:
        app: sample-app
      annotations:
        container.apparmor.security.beta.kubernetes.io/sample-app: runtime/default
        seccomp.security.alpha.kubernetes.io/pod: runtime/default
    spec:
      containers:
        - command:
            - /app/sample-app
          image: gitopsbook/sample-app:v0.1
          name: sample-app
          ports:
            - containerPort: 8080
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - AUDIT_WRITE
                - CHOWN
                - DAC_OVERRIDE
                - FOWNER
                - FSETID
                - KILL
                - MKNOD
                - NET_BIND_SERVICE
                - NET_RAW
                - SETFCAP
                - SETGID
                - SETPCAP
                - SETUID
                - SYS_CHROOT
            privileged: false
            readOnlyRootFilesystem: true
            runAsNonRoot: false
      automountServiceAccountToken: false
  strategy: {}
# sgined doc