apiVersion: v1
kind: Service
metadata:
  labels:
    app.kubernetes.io/instance: nexus
    app.kubernetes.io/name: nexus-repository-manager
    app.kubernetes.io/version: 3.62.0
  name: nexus-nexus-repository-manager
  namespace: nexus
spec:
  ports:
  - name: nexus-ui
    port: 8081
    protocol: TCP
  selector:
    app.kubernetes.io/instance: nexus
    app.kubernetes.io/name: nexus-repository-manager
  type: ClusterIP
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app.kubernetes.io/instance: nexus
    app.kubernetes.io/name: nexus-repository-manager
    app.kubernetes.io/version: 3.62.0
  name: nexus-nexus-repository-manager
  namespace: nexus
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/instance: nexus
      app.kubernetes.io/name: nexus-repository-manager
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app.kubernetes.io/instance: nexus
        app.kubernetes.io/name: nexus-repository-manager
    spec:
      containers:
      - env:
        - name: INSTALL4J_ADD_VM_PARAMS
          value: "-Xms2703M -Xmx2703M -XX:MaxDirectMemorySize=2703M -XX:+UnlockExperimentalVMOptions -Djava.util.prefs.userRoot=/nexus-data/javaprefs"
        - name: NEXUS_SECURITY_RANDOMPASSWORD
          value: "true"
        envFrom: null
        image: reg.inje-private.com/nnd002/sonatype/nexus3:3.72.0
        imagePullPolicy: IfNotPresent
        lifecycle: null
        livenessProbe:
          failureThreshold: 6
          httpGet:
            path: /
            port: 8081
          initialDelaySeconds: 30
          periodSeconds: 30
          timeoutSeconds: 10
        name: nexus-repository-manager
        ports:
        - containerPort: 8081
          name: nexus-ui
        readinessProbe:
          failureThreshold: 6
          httpGet:
            path: /
            port: 8081
          initialDelaySeconds: 30
          periodSeconds: 30
          timeoutSeconds: 10
            #resources: # by ljh
          #limits:
            #cpu: 4
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
        volumeMounts:
        - mountPath: /nexus-data
          name: nexus-repository-manager-data
      securityContext:
        fsGroup: 200
        runAsGroup: 200
        runAsUser: 200
      serviceAccountName: nexus-nexus-repository-manager
      terminationGracePeriodSeconds: 120
      volumes:
      - name: nexus-repository-manager-data
        persistentVolumeClaim:
          claimName: nexus-nexus-repository-manager-data