58 lines
1.3 KiB
YAML
58 lines
1.3 KiB
YAML
|
apiVersion: apps.openshift.io/v1
|
||
|
|
kind: DeploymentConfig
|
||
|
|
metadata:
|
||
|
|
name: oai-inf-du-sa
|
||
|
|
labels:
|
||
|
|
app: oai-inf-du-sa
|
||
|
|
spec:
|
||
|
|
replicas: 3
|
||
|
|
selector:
|
||
|
|
app: oai-inf-du-sa
|
||
|
|
strategy:
|
||
|
|
type: Rolling
|
||
|
|
rollingParams:
|
||
|
|
intervalSeconds: 1
|
||
|
|
updatePeriodSeconds: 1
|
||
|
|
maxUnavailable: 0
|
||
|
|
maxSurge: 1
|
||
|
|
minReadySeconds: 30
|
||
|
|
template:
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app: oai-inf-du-sa
|
||
|
|
annotations:
|
||
|
|
k8s.v1.cni.cncf.io/networks: oai-du-net
|
||
|
|
spec:
|
||
|
|
securityContextConstraints:
|
||
|
|
- name: privileged
|
||
|
|
- name: oai-scc
|
||
|
|
|
||
|
|
serviceAccountName: oai-sa
|
||
|
|
containers:
|
||
|
|
- name: inf-cu
|
||
|
|
image: image-registry.openshift-image-registry.svc:5000/infidel-test/oai-image-du
|
||
|
|
securityContext:
|
||
|
|
privileged: true
|
||
|
|
capabilities:
|
||
|
|
add: ["SYS_ADMIN"]
|
||
|
|
volumeMounts:
|
||
|
|
- mountPath: /dev/net/tun
|
||
|
|
readOnly: true
|
||
|
|
name: dev-tun
|
||
|
|
volumes:
|
||
|
|
- name: dev-tun
|
||
|
|
hostPath:
|
||
|
|
path: /dev/net/tun
|
||
|
|
triggers:
|
||
|
|
- type: ConfigChange
|
||
|
|
- type: ImageChange
|
||
|
|
imageChangeParams:
|
||
|
|
automatic: true
|
||
|
|
containerNames:
|
||
|
|
- oai-inf-du-sa
|
||
|
|
from:
|
||
|
|
kind: ImageStreamTag
|
||
|
|
name: oai-image-du:latest
|
||
|
|
namespace: infidel-test
|
||
|
|
|