Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save iliapolo/faba565ab32c970f3db6e3e0e5f28a27 to your computer and use it in GitHub Desktop.
Save iliapolo/faba565ab32c970f3db6e3e0e5f28a27 to your computer and use it in GitHub Desktop.
apiVersion: apps/v1
kind: Deployment
metadata:
name: aws-container-day-web-c8024530
spec:
minReadySeconds: 0
progressDeadlineSeconds: 600
replicas: 2
selector:
matchLabels:
cdk8s.io/metadata.addr: aws-container-day-Web-c80b2a40
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
cdk8s.io/metadata.addr: aws-container-day-Web-c80b2a40
spec:
affinity:
podAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
cdk8s.io/metadata.addr: aws-container-day-Cache-c8850003
topologyKey: kubernetes.io/hostname
automountServiceAccountToken: false
containers:
- image: web
imagePullPolicy: Always
name: main
resources:
limits:
cpu: 1500m
memory: 2048Mi
requests:
cpu: 1000m
memory: 512Mi
securityContext:
allowPrivilegeEscalation: false
privileged: false
readOnlyRootFilesystem: true
runAsGroup: 26000
runAsNonRoot: true
runAsUser: 25000
dnsPolicy: ClusterFirst
restartPolicy: Always
securityContext:
fsGroupChangePolicy: Always
runAsNonRoot: true
setHostnameAsFQDN: false
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: aws-container-day-cache-c85447a0
spec:
minReadySeconds: 0
progressDeadlineSeconds: 600
replicas: 2
selector:
matchLabels:
cdk8s.io/metadata.addr: aws-container-day-Cache-c8850003
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
cdk8s.io/metadata.addr: aws-container-day-Cache-c8850003
spec:
automountServiceAccountToken: false
containers:
- image: cache
imagePullPolicy: Always
name: main
resources:
limits:
cpu: 1500m
memory: 2048Mi
requests:
cpu: 1000m
memory: 512Mi
securityContext:
allowPrivilegeEscalation: false
privileged: false
readOnlyRootFilesystem: true
runAsGroup: 26000
runAsNonRoot: true
runAsUser: 25000
dnsPolicy: ClusterFirst
restartPolicy: Always
securityContext:
fsGroupChangePolicy: Always
runAsNonRoot: true
setHostnameAsFQDN: false
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment