Skip to content

Commit 51bccf3

Browse files
committed
Create example that can be reused
1 parent 33a1381 commit 51bccf3

File tree

2 files changed

+113
-0
lines changed

2 files changed

+113
-0
lines changed

example/pgsqlgule-classic.yaml

Lines changed: 59 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,59 @@
1+
apiVersion: v1
2+
kind: ServiceAccount
3+
metadata:
4+
name: pgsqlgule-dv
5+
namespace: demo-secatscale
6+
---
7+
apiVersion: apps/v1
8+
kind: Deployment
9+
metadata:
10+
name: pgsqlgule-dv-classic
11+
namespace: demo-secatscale
12+
labels:
13+
app: pgsqlgule-dv
14+
spec:
15+
replicas: 1
16+
selector:
17+
matchLabels:
18+
app: pgsqlgule-dv
19+
template:
20+
metadata:
21+
labels:
22+
app: pgsqlgule-dv
23+
vault-db-injector-dev: "true"
24+
annotations:
25+
db-creds-injector.numberly.io/pgsqlgule_dv.role: pgsqlgule-dv
26+
db-creds-injector.numberly.io/pgsqlgule_dv.mode: classic
27+
db-creds-injector.numberly.io/pgsqlgule_dv.env-key-dbpassword: DB_PASSWORD,PGPASSWORD
28+
db-creds-injector.numberly.io/pgsqlgule_dv.env-key-dbuser: DB_USER,PGUSER
29+
spec:
30+
serviceAccountName: pgsqlgule-dv
31+
imagePullSecrets:
32+
- name: "registry-token"
33+
- name: "registry-token-common"
34+
containers:
35+
- name: svc
36+
image: registry.numberly.in/docker-images/postgres-curl-jq:0.1.0
37+
imagePullPolicy: IfNotPresent
38+
resources:
39+
limits:
40+
ephemeral-storage: 2Gi
41+
memory: 400Mi
42+
requests:
43+
ephemeral-storage: 512Mi
44+
memory: 160Mi
45+
securityContext:
46+
readOnlyRootFilesystem: true
47+
allowPrivilegeEscalation: false
48+
runAsNonRoot: true
49+
runAsUser: 65534
50+
runAsGroup: 65534
51+
command:
52+
- "bash"
53+
- "-c"
54+
- "trap 'exit 0' TERM; sleep infinity & wait"
55+
env:
56+
- name: PGHOST
57+
value: pginstance
58+
- name: PGDATABASE
59+
value: pgsqlgule_dv

example/pgsqlgule-uri.yaml

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
apiVersion: v1
2+
kind: ServiceAccount
3+
metadata:
4+
name: pgsqlgule-dv
5+
namespace: demo-secatscale
6+
---
7+
apiVersion: apps/v1
8+
kind: Deployment
9+
metadata:
10+
name: pgsqlgule-dv-uri
11+
namespace: demo-secatscale
12+
labels:
13+
app: pgsqlgule-dv
14+
spec:
15+
replicas: 1
16+
selector:
17+
matchLabels:
18+
app: pgsqlgule-dv
19+
template:
20+
metadata:
21+
labels:
22+
app: pgsqlgule-dv
23+
vault-db-injector-dev: "true"
24+
annotations:
25+
db-creds-injector.numberly.io/pgsqlgule_dv.role: pgsqlgule-dv
26+
db-creds-injector.numberly.io/pgsqlgule_dv.mode: uri
27+
db-creds-injector.numberly.io/pgsqlgule_dv.template: postgres://@pginstance:5432/pgsqlgule_dv?sslmode=require
28+
db-creds-injector.numberly.io/pgsqlgule_dv.env-key-uri: POSTGRES_URL
29+
spec:
30+
serviceAccountName: pgsqlgule-dv
31+
imagePullSecrets:
32+
- name: "registry-token"
33+
- name: "registry-token-common"
34+
containers:
35+
- name: svc
36+
image: registry.numberly.in/docker-images/postgres-curl-jq:0.1.0
37+
imagePullPolicy: IfNotPresent
38+
resources:
39+
limits:
40+
ephemeral-storage: 2Gi
41+
memory: 400Mi
42+
requests:
43+
ephemeral-storage: 512Mi
44+
memory: 160Mi
45+
securityContext:
46+
readOnlyRootFilesystem: true
47+
allowPrivilegeEscalation: false
48+
runAsNonRoot: true
49+
runAsUser: 65534
50+
runAsGroup: 65534
51+
command:
52+
- "bash"
53+
- "-c"
54+
- "trap 'exit 0' TERM; sleep infinity & wait"

0 commit comments

Comments
 (0)