Skip to content

Instantly share code, notes, and snippets.

@martimors
Created May 4, 2022 08:52
Show Gist options
  • Save martimors/eb202ced5b95f13702f61437d8fd356a to your computer and use it in GitHub Desktop.
Save martimors/eb202ced5b95f13702f61437d8fd356a to your computer and use it in GitHub Desktop.
Non-root non-persistent postgresql container in kubernetes
---
apiVersion: v1
kind: Service
metadata:
name: postgres
spec:
selector:
app: postgres
ports:
- port: 5432
targetPort: 5432
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: postgres
spec:
selector:
matchLabels:
app: postgres
template:
metadata:
labels:
app: postgres
spec:
securityContext:
runAsUser: 999 # See https://github.com/docker-library/postgres/blob/bfc5d81c8f5647c690f452dc558e64fddb1802f6/10/Dockerfile
runAsGroup: 999
fsGroup: 999
containers:
- name: postgres
image: postgres:13
resources:
limits:
memory: "500Mi"
cpu: "500m"
requests:
memory: "500Mi"
cpu: "500m"
ports:
- containerPort: 5432
env:
- name: PGDATA
value: /var/lib/postgresql/data/pgdata
- name: POSTGRES_PASSWORD
value: postgres
- name: POSTGRES_USERNAME
value: postgres
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment