1
---
2
apiVersion: apps/v1
3
kind: Deployment
4
metadata:
5
  annotations: {}
6
  labels:
7
    k8s.kuboard.cn/name: certd-deployment
8
  name: certd-deployment
9
  namespace: certd
10
spec:
11
  selector:
12
    matchLabels:
13
      k8s.kuboard.cn/name: certd-deployment
14
  template:
15
    metadata:
16
      labels:
17
        k8s.kuboard.cn/name: certd-deployment
18
    spec:
19
      containers:
20
        - env:
21
            - name: TZ
22
              value: Asia/Shanghai
23
            - name: certd_system_resetAdminPasswd
24
              value: 'false'
25
          image: 'registry.cn-shenzhen.aliyuncs.com/handsfree/certd:latest'
26
          imagePullPolicy: IfNotPresent
27
          name: certd
28
          ports:
29
            - containerPort: 7002
30
              name: https
31
              protocol: TCP
32
            - containerPort: 7001
33
              name: http
34
              protocol: TCP
35
          resources: {}
36
          terminationMessagePath: /dev/termination-log
37
          terminationMessagePolicy: File
38
          volumeMounts:
39
            - mountPath: /etc/localtime
40
              name: localtime
41
              readOnly: true
42
            - mountPath: /etc/timezone
43
              name: timezone
44
              readOnly: true
45
            - mountPath: /app/data
46
              name: data
47
      dnsPolicy: ClusterFirst
48
      restartPolicy: Always
49
      schedulerName: default-scheduler
50
      securityContext: {}
51
      volumes:
52
        - hostPath:
53
            path: /etc/localtime
54
            type: File
55
          name: localtime
56
        - hostPath:
57
            path: /etc/timezone
58
            type: ''
59
          name: timezone
60
        - name: data
61
          persistentVolumeClaim:
62
            claimName: certd-data
63
---
64
apiVersion: v1
65
kind: Service
66
metadata:
67
  annotations: {}
68
  labels:
69
    k8s.kuboard.cn/name: certd-deployment
70
  name: certd-deployment
71
  namespace: certd
72
spec:
73
  ports:
74
    - name: http
75
      port: 7001
76
      protocol: TCP
77
      targetPort: 7001
78
    - name: https
79
      port: 7002
80
      protocol: TCP
81
      targetPort: 7002
82
  selector:
83
    k8s.kuboard.cn/name: certd-deployment
84
  sessionAffinity: None
85
  type: ClusterIP
86
status:
87
  loadBalancer: {}
88

89
---
90
apiVersion: networking.k8s.io/v1
91
kind: Ingress
92
metadata:
93
  annotations:
94
    cert-manager.io/cluster-issuer: my-acme-issuer
95
  labels:
96
    k8s.kuboard.cn/name: certd-deployment
97
  name: certd-deployment
98
  namespace: certd
99
spec:
100
  ingressClassName: nginx-ingress
101
  rules:
102
    - host: certd.k8s.lan
103
      http:
104
        paths:
105
          - backend:
106
              service:
107
                name: certd-deployment
108
                port:
109
                  number: 7001
110
            path: /
111
            pathType: Prefix
112
  tls:
113
    - hosts:
114
        - certd.k8s.lan
115
      secretName: certd-tls-secret