scrutiny

docker-compose.yaml

---
version: "3.8"

x-restart: &restart
  restart: unless-stopped

services:
  scrutiny:
    <<: *restart
    container_name: scrutiny
    image: ghcr.io/analogj/scrutiny:master-omnibus
    cap_add:
      - SYS_RAWIO
      - SYS_ADMIN
    ports:
      - "8080:8080" # webapp
      - "8086:8086" # influxDB admin
    volumes:
      - /run/udev:/run/udev:ro
      - /opt/docker-data/scrutiny/config:/opt/scrutiny/config
      - /opt/docker-data/scrutiny/influxdb:/opt/scrutiny/influxdb
    devices:
      - "/dev/sda"
      - "/dev/nvme0"

scrutiny-claim0-persistentvolumeclaim.yaml

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  creationTimestamp: null
  labels:
    io.kompose.service: scrutiny-claim0
  name: scrutiny-claim0
spec:
  accessModes:
    - ReadOnlyMany
  resources:
    requests:
      storage: 100Mi
status: {}

scrutiny-claim1-persistentvolumeclaim.yaml

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  creationTimestamp: null
  labels:
    io.kompose.service: scrutiny-claim1
  name: scrutiny-claim1
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 100Mi
status: {}

scrutiny-claim2-persistentvolumeclaim.yaml

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  creationTimestamp: null
  labels:
    io.kompose.service: scrutiny-claim2
  name: scrutiny-claim2
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 100Mi
status: {}

scrutiny-deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    kompose.cmd: kompose convert -f docker-compose-example.yaml
    kompose.version: 1.26.1 (HEAD)
  creationTimestamp: null
  labels:
    io.kompose.service: scrutiny
  name: scrutiny
spec:
  replicas: 1
  selector:
    matchLabels:
      io.kompose.service: scrutiny
  strategy:
    type: Recreate
  template:
    metadata:
      annotations:
        kompose.cmd: kompose convert -f docker-compose-example.yaml
        kompose.version: 1.26.1 (HEAD)
      creationTimestamp: null
      labels:
        io.kompose.service: scrutiny
    spec:
      containers:
        - image: ghcr.io/analogj/scrutiny:master-omnibus
          name: scrutiny
          ports:
            - containerPort: 8080
            - containerPort: 8086
          resources: {}
          securityContext:
            capabilities:
              add:
                - SYS_RAWIO
                - SYS_ADMIN
          volumeMounts:
            - mountPath: /run/udev
              name: scrutiny-claim0
              readOnly: true
            - mountPath: /opt/scrutiny/config
              name: scrutiny-claim1
            - mountPath: /opt/scrutiny/influxdb
              name: scrutiny-claim2
      restartPolicy: Always
      volumes:
        - name: scrutiny-claim0
          persistentVolumeClaim:
            claimName: scrutiny-claim0
            readOnly: true
        - name: scrutiny-claim1
          persistentVolumeClaim:
            claimName: scrutiny-claim1
        - name: scrutiny-claim2
          persistentVolumeClaim:
            claimName: scrutiny-claim2
status: {}

scrutiny-service.yaml

apiVersion: v1
kind: Service
metadata:
  annotations:
    kompose.cmd: kompose convert -f docker-compose-example.yaml
    kompose.version: 1.26.1 (HEAD)
  creationTimestamp: null
  labels:
    io.kompose.service: scrutiny
  name: scrutiny
spec:
  ports:
    - name: "8080"
      port: 8080
      targetPort: 8080
    - name: "8086"
      port: 8086
      targetPort: 8086
  selector:
    io.kompose.service: scrutiny
status:
  loadBalancer: {}