67 lines
1.7 KiB
YAML
67 lines
1.7 KiB
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: apps-pg-isolation-probe
|
|
labels:
|
|
railiance.io/postgres-client: apps-pg
|
|
railiance.io/purpose: apps-pg-isolation-probe
|
|
---
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: coulomb-probe
|
|
namespace: apps-pg-isolation-probe
|
|
labels:
|
|
app.kubernetes.io/name: apps-pg-isolation-probe
|
|
spec:
|
|
restartPolicy: Never
|
|
automountServiceAccountToken: false
|
|
containers:
|
|
- name: psql
|
|
image: ghcr.io/cloudnative-pg/postgresql:16
|
|
command: [sh, -c, "sleep 1800"]
|
|
env:
|
|
- name: PGPASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: coulomb-social-app-credentials
|
|
key: password
|
|
resources:
|
|
requests: {cpu: 10m, memory: 32Mi}
|
|
limits: {cpu: 100m, memory: 128Mi}
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities: {drop: [ALL]}
|
|
runAsNonRoot: true
|
|
runAsUser: 26
|
|
seccompProfile: {type: RuntimeDefault}
|
|
---
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: vergabe-probe
|
|
namespace: apps-pg-isolation-probe
|
|
labels:
|
|
app.kubernetes.io/name: apps-pg-isolation-probe
|
|
spec:
|
|
restartPolicy: Never
|
|
automountServiceAccountToken: false
|
|
containers:
|
|
- name: psql
|
|
image: ghcr.io/cloudnative-pg/postgresql:16
|
|
command: [sh, -c, "sleep 1800"]
|
|
env:
|
|
- name: PGPASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: vergabe-app-credentials
|
|
key: password
|
|
resources:
|
|
requests: {cpu: 10m, memory: 32Mi}
|
|
limits: {cpu: 100m, memory: 128Mi}
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities: {drop: [ALL]}
|
|
runAsNonRoot: true
|
|
runAsUser: 26
|
|
seccompProfile: {type: RuntimeDefault}
|