1 files changed, 63 insertions, 0 deletions
diff --git a/templates/default/kubernetes/onionbalance-deploy.yml.j2 b/templates/default/kubernetes/onionbalance-deploy.yml.j2
new file mode 100644
index 0000000..c63b247
--- /dev/null
+++ b/templates/default/kubernetes/onionbalance-deploy.yml.j2
@@ -0,0 +1,63 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: {{ namespace }}
+  name: onionbalance
+  labels:
+    app: onionbalance
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: onionbalance
+  strategy:
+    type: Recreate
+  revisionHistoryLimit: 5
+  template:
+    metadata:
+      labels:
+        app: onionbalance
+    spec:
+      nodeName: {{ worker.name }}
+      serviceAccountName: onionbalance
+      securityContext:
+        runAsUser: 998
+        fsGroup: 998
+      containers:
+      - name: tor
+        image: spreadspace/onionbalance:{{ desc.globals.deployment.parameter.onionbalance_image_version }}
+        imagePullPolicy: Always
+        args:
+        - /run-tor.sh
+        volumeMounts:
+        - name: onion-run
+          mountPath: /var/run/tor
+        - name: onion-lib
+          mountPath: /var/lib/tor
+      - name: balance
+        image: spreadspace/onionbalance:{{ desc.globals.deployment.parameter.onionbalance_image_version }}
+        imagePullPolicy: Always
+        args:
+        - /run-balance.sh
+        env:
+        - name: POD_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        volumeMounts:
+        - name: onion-run
+          mountPath: /var/run/tor
+        - name: onion-keys
+          readOnly: true
+          mountPath: /var/run/secrets/spreadspace.org/onionbalance
+      volumes:
+      - name: onion-run
+        emptyDir:
+          medium: Memory
+      - name: onion-lib
+        hostPath:
+          type: DirectoryOrCreate
+          path: /var/lib/tor/{{ desc.globals.name }}/_balance
+      - name: onion-keys
+        secret:
+          secretName: onionbalance