mirror of
https://github.com/openappsec/openappsec.git
synced 2025-06-28 16:41:02 +03:00
72 lines
3.0 KiB
YAML
72 lines
3.0 KiB
YAML
{{- if and (eq "standalone" .Values.appsec.mode) (eq .Values.appsec.playground false) .Values.appsec.tuning.enabled }}
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ .Values.appsec.tuning.name }}-deployment
|
|
labels:
|
|
app: {{ .Values.appsec.tuning.name }}-lbl
|
|
spec:
|
|
replicas: {{ .Values.appsec.tuning.replicaCount }}
|
|
selector:
|
|
matchLabels:
|
|
app: {{ .Values.appsec.tuning.name }}-lbl
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: {{ .Values.appsec.tuning.name }}-lbl
|
|
group: fog-core
|
|
spec:
|
|
securityContext:
|
|
{{- with .Values.appsec.tuning.securityContext }}
|
|
fsGroup: {{ .fsGroup }}
|
|
runAsGroup: {{ .runAsGroup }}
|
|
runAsUser: {{ .runAsUser }}
|
|
{{- end }}
|
|
serviceAccountName: tuning-svc-account
|
|
containers:
|
|
- name: {{ .Values.appsec.tuning.name }}
|
|
imagePullPolicy: Always
|
|
{{- with .Values.appsec.tuning.image }}
|
|
image: {{ .registry }}/{{ .image }}:{{ .tag }}
|
|
{{- end }}
|
|
ports:
|
|
- containerPort: {{ .Values.appsec.tuning.port }}
|
|
livenessProbe:
|
|
failureThreshold: {{ .Values.appsec.tuning.failureThreshold }}
|
|
httpGet:
|
|
path: /health/live
|
|
port: {{ .Values.appsec.tuning.port }}
|
|
scheme: HTTP
|
|
initialDelaySeconds: {{ .Values.appsec.tuning.initialDelaySeconds }}
|
|
periodSeconds: {{ .Values.appsec.tuning.periodSeconds }}
|
|
timeoutSeconds: {{ .Values.appsec.tuning.timeoutSeconds }}
|
|
readinessProbe:
|
|
failureThreshold: {{ .Values.appsec.tuning.failureThreshold }}
|
|
httpGet:
|
|
path: /health/ready
|
|
port: {{ .Values.appsec.tuning.port }}
|
|
scheme: HTTP
|
|
initialDelaySeconds: {{ .Values.appsec.tuning.initialDelaySeconds }}
|
|
periodSeconds: {{ .Values.appsec.tuning.periodSeconds }}
|
|
successThreshold: {{ .Values.appsec.tuning.successThreshold }}
|
|
timeoutSeconds: {{ .Values.appsec.tuning.timeoutSeconds }}
|
|
env:
|
|
- name: K8S_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: MODE
|
|
value: "stand-alone"
|
|
- name: DB_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: {{ include "common.names.fullname" .Subcharts.postgresql }}
|
|
key: {{ include "postgresql.adminPasswordKey" .Subcharts.postgresql }}
|
|
- name: QUERY_DB_NAME_FMT
|
|
value: "postgres://postgres:%s@{{ include "postgresql.primary.fullname" .Subcharts.postgresql }}:5432/i2datatubeschemasecurityeventlogsv03?sslmode=disable"
|
|
- name: QUERY_DB_ROOT_FMT
|
|
value: "postgres://postgres:%s@{{ include "postgresql.primary.fullname" .Subcharts.postgresql }}:5432/?sslmode=disable"
|
|
- name: RP_BASEURL
|
|
value: http://{{ .Values.appsec.storage.name }}-svc/api
|
|
{{- end }}
|