github.com/IBM-Blockchain/fabric-operator@v1.0.4/definitions/console/deployment.yaml (about)

     1  apiVersion: apps/v1
     2  kind: Deployment
     3  metadata:
     4    name: ibpconsole-deployment
     5  spec:
     6    selector: {}
     7    template:
     8      spec:
     9        affinity:
    10          nodeAffinity:
    11            requiredDuringSchedulingIgnoredDuringExecution:
    12              nodeSelectorTerms:
    13                - matchExpressions:
    14                    - key: kubernetes.io/arch
    15                      operator: In
    16                      values:
    17                        - amd64
    18        containers:
    19          - env:
    20              - name: LICENSE
    21                value: accept
    22            image: ""
    23            imagePullPolicy: Always
    24            lifecycle:
    25              preStop:
    26                exec:
    27                  command:
    28                    - /bin/sh
    29                    - -c
    30                    - curl -X POST -k https://localhost:3000/api/v3/requests/stop
    31            livenessProbe:
    32              failureThreshold: 5
    33              httpGet:
    34                path: /api/v3/healthcheck
    35                port: optools
    36                scheme: HTTPS
    37              initialDelaySeconds: 60
    38              timeoutSeconds: 5
    39            name: optools
    40            ports:
    41              - containerPort: 3000
    42                name: optools
    43                protocol: TCP
    44              - containerPort: 3001
    45                name: proxy
    46                protocol: TCP
    47            readinessProbe:
    48              httpGet:
    49                path: /api/v3/healthcheck
    50                port: optools
    51                scheme: HTTPS
    52              initialDelaySeconds: 55
    53              periodSeconds: 5
    54              timeoutSeconds: 5
    55            resources:
    56              limits:
    57                cpu: 500m
    58                ephemeral-storage: 1G
    59                memory: 1000Mi
    60              requests:
    61                cpu: 500m
    62                ephemeral-storage: 100M
    63                memory: 1000Mi
    64            securityContext:
    65              allowPrivilegeEscalation: false
    66              capabilities:
    67                add:
    68                  - NET_BIND_SERVICE
    69                drop:
    70                  - ALL
    71              privileged: false
    72              readOnlyRootFilesystem: false
    73              runAsNonRoot: true
    74              runAsUser: 1000
    75            volumeMounts:
    76              - mountPath: /template/
    77                name: template
    78          - env:
    79              - name: LICENSE
    80                value: accept
    81              - name: CONFIGPATH
    82                value: /deployer/settings.yaml
    83            image: ""
    84            imagePullPolicy: Always
    85            livenessProbe:
    86              failureThreshold: 5
    87              initialDelaySeconds: 16
    88              tcpSocket:
    89                port: 8080
    90              timeoutSeconds: 5
    91            name: deployer
    92            ports:
    93              - containerPort: 8080
    94                name: api
    95                protocol: TCP
    96            readinessProbe:
    97              initialDelaySeconds: 10
    98              periodSeconds: 5
    99              tcpSocket:
   100                port: 8080
   101              timeoutSeconds: 5
   102            resources:
   103              limits:
   104                cpu: 100m
   105                ephemeral-storage: 1G
   106                memory: 200Mi
   107              requests:
   108                cpu: 100m
   109                ephemeral-storage: 100M
   110                memory: 200Mi
   111            securityContext:
   112              allowPrivilegeEscalation: false
   113              capabilities:
   114                add:
   115                  - NET_BIND_SERVICE
   116                drop:
   117                  - ALL
   118              privileged: false
   119              readOnlyRootFilesystem: false
   120              runAsNonRoot: true
   121              runAsUser: 1000
   122            volumeMounts:
   123              - mountPath: /deployer/
   124                name: deployer-template
   125          - command:
   126              - sh
   127              - -c
   128              - configtxlator start --port=8083 --CORS=*
   129            env:
   130              - name: LICENSE
   131                value: accept
   132            image: ""
   133            imagePullPolicy: Always
   134            livenessProbe:
   135              failureThreshold: 5
   136              initialDelaySeconds: 16
   137              tcpSocket:
   138                port: 8083
   139              timeoutSeconds: 5
   140            name: configtxlator
   141            ports:
   142              - containerPort: 8083
   143                name: configtxlator
   144                protocol: TCP
   145            readinessProbe:
   146              initialDelaySeconds: 10
   147              periodSeconds: 5
   148              tcpSocket:
   149                port: 8083
   150              timeoutSeconds: 5
   151            resources:
   152              limits:
   153                cpu: 25m
   154                ephemeral-storage: 1G
   155                memory: 50Mi
   156              requests:
   157                cpu: 25m
   158                ephemeral-storage: 100M
   159                memory: 50Mi
   160            securityContext:
   161              allowPrivilegeEscalation: false
   162              capabilities:
   163                add:
   164                  - NET_BIND_SERVICE
   165                drop:
   166                  - ALL
   167              privileged: false
   168              readOnlyRootFilesystem: false
   169        hostIPC: false
   170        hostNetwork: false
   171        hostPID: false
   172        initContainers:
   173          - env:
   174              - name: LICENSE
   175                value: accept
   176            image: ""
   177            imagePullPolicy: Always
   178            name: init
   179            resources:
   180              limits:
   181                cpu: 200m
   182                ephemeral-storage: 1G
   183                memory: 400M
   184              requests:
   185                cpu: 200m
   186                ephemeral-storage: 100M
   187                memory: 400M
   188            securityContext:
   189              allowPrivilegeEscalation: false
   190              capabilities:
   191                add:
   192                  - CHOWN
   193                  - FOWNER
   194                drop:
   195                  - ALL
   196              privileged: false
   197              readOnlyRootFilesystem: false
   198              runAsNonRoot: false
   199              runAsUser: 0
   200        securityContext:
   201          fsGroup: 2000
   202          runAsNonRoot: true
   203          runAsUser: 1000
   204        serviceAccountName: sample