Files
apps/heimdall/main.yaml
Philip Haupt ce8b0fbfe4 heimdall certs
2025-07-23 23:25:24 +02:00

123 lines
3.0 KiB
YAML

apiVersion: v1
kind: Service
metadata:
labels:
app.kubernetes.io/instance: heimdall
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: heimdall
app.kubernetes.io/version: 2.2.2
helm.sh/chart: heimdall-8.4.2
name: heimdall
spec:
ports:
- name: http
port: 80
protocol: TCP
targetPort: http
selector:
app.kubernetes.io/instance: heimdall
app.kubernetes.io/name: heimdall
type: ClusterIP
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
labels:
app.kubernetes.io/instance: heimdall
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: heimdall
app.kubernetes.io/version: 2.2.2
helm.sh/chart: heimdall-8.4.2
name: heimdall-config
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 1Gi
storageClassName: openebs-3-replicas
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app.kubernetes.io/instance: heimdall
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: heimdall
app.kubernetes.io/version: 2.2.2
helm.sh/chart: heimdall-8.4.2
name: heimdall
spec:
replicas: 1
revisionHistoryLimit: 3
selector:
matchLabels:
app.kubernetes.io/instance: heimdall
app.kubernetes.io/name: heimdall
strategy:
type: Recreate
template:
metadata:
labels:
app.kubernetes.io/instance: heimdall
app.kubernetes.io/name: heimdall
spec:
automountServiceAccountToken: true
containers:
- env:
- name: PGID
value: "1000"
- name: PUID
value: "1000"
- name: TZ
value: CET
image: lscr.io/linuxserver/heimdall:v2.6.3-ls302
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
initialDelaySeconds: 0
periodSeconds: 10
tcpSocket:
port: 80
timeoutSeconds: 1
name: heimdall
ports:
- containerPort: 80
name: http
protocol: TCP
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 0
periodSeconds: 10
tcpSocket:
port: 80
timeoutSeconds: 1
startupProbe:
failureThreshold: 30
initialDelaySeconds: 0
periodSeconds: 5
tcpSocket:
port: 80
timeoutSeconds: 1
volumeMounts:
- mountPath: /config
name: config
- mountPath: /etc/ssl/certs/my-root.crt
name: ca-cert-volume
subPath: root
- mountPath: /etc/ssl/certs/my-k8s.crt
name: ca-cert-volume
subPath: k8s
- mountPath: /etc/ssl/certs/my-xca.crt
name: ca-cert-volume
subPath: xca
dnsPolicy: ClusterFirst
enableServiceLinks: true
serviceAccountName: default
volumes:
- name: config
persistentVolumeClaim:
claimName: heimdall-config
- name: ca-cert-volume
configMap:
name: ca-certs