From 0dd42f37aff12f4c9e9b63b9c6c829d3d9b83f63 Mon Sep 17 00:00:00 2001 From: Alberto Trevezani Date: Tue, 5 Nov 2019 08:05:49 -0300 Subject: [PATCH] Adicionado volume para armazenar os certificados --- kubernates/platform/bpers.yaml | 41 +++++++++++++++++++++++++++++++++- 1 file changed, 40 insertions(+), 1 deletion(-) diff --git a/kubernates/platform/bpers.yaml b/kubernates/platform/bpers.yaml index 708e22b..b9c5ed4 100644 --- a/kubernates/platform/bpers.yaml +++ b/kubernates/platform/bpers.yaml @@ -1,4 +1,33 @@ ---- +--- +apiVersion: v1 +kind: PersistentVolume +metadata: + name: configuration-volume + namespace: bpe-rs + labels: + type: local +spec: + storageClassName: manual + capacity: + storage: 1Gi + accessModes: + - ReadWriteOnce + hostPath: + path: /mnt/security +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: configuration-claim + namespace: bpe-rs +spec: + storageClassName: manual + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 1Gi +--- apiVersion: v1 kind: Service metadata: @@ -29,6 +58,9 @@ spec: labels: app: bpers spec: + securityContext: + runAsUser: 0 + fsGroup: 0 containers: - name: bpers image: 192.168.1.9:5000/bpers:255 @@ -37,6 +69,13 @@ spec: - containerPort: 8080 name: http protocol: TCP + volumeMounts: + - name: configuration-storage + mountPath: /opt/jboss/wildfly/standalone/configuration/security + volumes: + - name: configuration-storage + persistentVolumeClaim: + claimName: configuration-claim restartPolicy: Always imagePullSecrets: - name: service-registry