blob: 99c6e7339d6300cf1f3dae94daf7c513b78417d9 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
securityContext:
allowPrivilegeEscalation: false
runAsUser: 990
runAsGroup: 990
containers:
- name: app
image: "ghcr.io/whawty/auth/app:v{{ whawty_auth_instances[whawty_auth_instance].version }}"
args:
- "run"
- "--web-addr"
- ":{{ whawty_auth_instances[whawty_auth_instance].port }}"
- "--web-config"
- "/config/web.yml"
env:
- name: "WHAWTY_AUTH_STORE_CONFIG"
value: "/config/store.yml"
volumeMounts:
- name: config
mountPath: /config
readOnly: true
- name: tls
mountPath: /tls
readOnly: true
- name: store
mountPath: /store
ports:
- containerPort: {{ whawty_auth_instances[whawty_auth_instance].port }}
hostPort: {{ whawty_auth_instances[whawty_auth_instance].port }}
{% if whawty_auth_instances[whawty_auth_instance].publish.zone.publisher == inventory_hostname %}
hostIP: "127.0.0.1"
{% endif %}
{% if 'sync' in whawty_auth_instances[whawty_auth_instance] %}
- name: sync
image: "ghcr.io/whawty/auth/sync:v{{ whawty_auth_instances[whawty_auth_instance].version }}"
args:
- "server"
volumeMounts:
- name: sync
mountPath: /config
readOnly: true
- name: store
mountPath: /store
readOnly: true
ports:
- containerPort: {{ whawty_auth_instances[whawty_auth_instance].sync.port }}
hostPort: {{ whawty_auth_instances[whawty_auth_instance].sync.port }}
{% endif %}
volumes:
- name: config
hostPath:
path: "{{ whawty_auth_instance_basepath }}/config"
type: Directory
- name: tls
hostPath:
path: "{{ whawty_auth_instance_basepath }}/tls"
type: Directory
- name: store
hostPath:
path: "{{ whawty_auth_instance_basepath }}/store"
type: Directory
{% if 'sync' in whawty_auth_instances[whawty_auth_instance] %}
- name: sync
hostPath:
path: "{{ whawty_auth_instance_basepath }}/sync"
type: Directory
{% endif %}
|
