vikingowl
961fbed6c3
- Use custom image registry (somegit.dev) with pull secrets and "latest" tag. - Enable HTTPRoute with hostname "heatguard.dev" and TLS via cert-manager. - Activate autoscaling with min/max replicas and resource metrics. - Switch Dockerfile to Alpine runtime with nonroot user. - Add helm directory to .dockerignore.
71 lines
1.0 KiB
YAML
71 lines
1.0 KiB
YAML
replicaCount: 1
|
|
|
|
image:
|
|
repository: somegit.dev/vikingowl/heatguard
|
|
pullPolicy: Always
|
|
tag: "latest"
|
|
|
|
imagePullSecrets:
|
|
- name: somegit
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 80
|
|
targetPort: 8080
|
|
|
|
httpRoute:
|
|
enabled: true
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
parentRefs:
|
|
- name: default
|
|
namespace: nginx-gateway
|
|
hostnames:
|
|
- heatguard.dev
|
|
|
|
env: []
|
|
# - name: API_KEY
|
|
# valueFrom:
|
|
# secretKeyRef:
|
|
# name: heatguard-secrets
|
|
# key: api-key
|
|
|
|
envFrom: []
|
|
# - configMapRef:
|
|
# name: heatguard-config
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 32Mi
|
|
limits:
|
|
cpu: 200m
|
|
memory: 64Mi
|
|
|
|
autoscaling:
|
|
enabled: true
|
|
minReplicas: 1
|
|
maxReplicas: 5
|
|
targetCPUUtilizationPercentage: 80
|
|
|
|
serviceAccount:
|
|
create: false
|
|
name: ""
|
|
annotations: {}
|
|
|
|
podSecurityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 65534
|
|
fsGroup: 65534
|
|
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
|
|
nodeSelector: {}
|
|
tolerations: []
|
|
affinity: {}
|