nd002test/on-premise/cicd/nexus/3_apply/deploy.yaml

97 lines
2.6 KiB
YAML

apiVersion: v1
kind: Service
metadata:
labels:
app.kubernetes.io/instance: nexus
app.kubernetes.io/name: nexus-repository-manager
app.kubernetes.io/version: 3.62.0
name: nexus-nexus-repository-manager
namespace: nexus
spec:
ports:
- name: nexus-ui
port: 8081
protocol: TCP
selector:
app.kubernetes.io/instance: nexus
app.kubernetes.io/name: nexus-repository-manager
type: ClusterIP
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app.kubernetes.io/instance: nexus
app.kubernetes.io/name: nexus-repository-manager
app.kubernetes.io/version: 3.62.0
name: nexus-nexus-repository-manager
namespace: nexus
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/instance: nexus
app.kubernetes.io/name: nexus-repository-manager
strategy:
type: Recreate
template:
metadata:
labels:
app.kubernetes.io/instance: nexus
app.kubernetes.io/name: nexus-repository-manager
spec:
containers:
- env:
- name: INSTALL4J_ADD_VM_PARAMS
value: "-Xms2703M -Xmx2703M -XX:MaxDirectMemorySize=2703M -XX:+UnlockExperimentalVMOptions -Djava.util.prefs.userRoot=/nexus-data/javaprefs"
- name: NEXUS_SECURITY_RANDOMPASSWORD
value: "true"
envFrom: null
image: reg.inje-private.com/nnd002/sonatype/nexus3:3.72.0
imagePullPolicy: IfNotPresent
lifecycle: null
livenessProbe:
failureThreshold: 6
httpGet:
path: /
port: 8081
initialDelaySeconds: 30
periodSeconds: 30
timeoutSeconds: 10
name: nexus-repository-manager
ports:
- containerPort: 8081
name: nexus-ui
readinessProbe:
failureThreshold: 6
httpGet:
path: /
port: 8081
initialDelaySeconds: 30
periodSeconds: 30
timeoutSeconds: 10
#resources: # by ljh
#limits:
#cpu: 4
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
volumeMounts:
- mountPath: /nexus-data
name: nexus-repository-manager-data
securityContext:
fsGroup: 200
runAsGroup: 200
runAsUser: 200
serviceAccountName: nexus-nexus-repository-manager
terminationGracePeriodSeconds: 120
volumes:
- name: nexus-repository-manager-data
persistentVolumeClaim:
claimName: nexus-nexus-repository-manager-data