imfreedom/k8s-cluster

First run at setting up reviewbot

2022-04-10, Gary Kramlich
fdef5049aec1
First run at setting up reviewbot
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: gemini-controller
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata:
name: gemini-controller
rules:
- apiGroups:
- gemini.fairwinds.com
resources:
- snapshotgroups
verbs:
- get
- list
- watch
- create
- update
- delete
- apiGroups:
- snapshot.storage.k8s.io
- ''
resources:
- volumesnapshots
- persistentvolumeclaims
verbs:
- get
- list
- create
- update
- delete
- apiGroups:
- apiextensions.k8s.io
resources:
- customresourcedefinitions
verbs:
- get
- create
- delete
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: gemini-controller
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: gemini-controller
subjects:
- kind: ServiceAccount
name: gemini-controller
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: gemini-controller
spec:
replicas: 1
revisionHistoryLimit: 0
selector:
matchLabels:
app: gemini
template:
spec:
serviceAccountName: gemini-controller
containers:
- command:
- gemini
image: quay.io/fairwinds/gemini:0.1
imagePullPolicy: Always
name: gemini-controller
resources:
requests:
memory: 64Mi
cpu: 25m
limits:
memory: 128Mi
cpu: 100m
securityContext:
allowPrivilegeEscalation: false
privileged: false
readOnlyRootFilesystem: true
runAsNonRoot: true
capabilities:
drop:
- ALL
---