diff options
Diffstat (limited to 'templates/default/kubernetes/sfive-deploy.yml.j2')
-rw-r--r-- | templates/default/kubernetes/sfive-deploy.yml.j2 | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/templates/default/kubernetes/sfive-deploy.yml.j2 b/templates/default/kubernetes/sfive-deploy.yml.j2 index 06c84dc..65b97e9 100644 --- a/templates/default/kubernetes/sfive-deploy.yml.j2 +++ b/templates/default/kubernetes/sfive-deploy.yml.j2 @@ -20,8 +20,12 @@ spec: labels: app: sfive worker: {{ worker.name }} +{% if worker.flags.sfive == 'proxy' and 'stream-onion' in worker.flags %} + spreadspace.org/onion-service: {{ worker.flags['stream-onion'] }} +{% endif %} spec: nodeName: {{ worker.name }} + serviceAccountName: sfive securityContext: runAsUser: 998 fsGroup: 998 @@ -41,6 +45,41 @@ spec: mountPath: /srv - name: proxy-config mountPath: /srv/config +{% if 'stream-onion' in worker.flags %} + - name: proxy-onion + image: spreadspace/sfive:{{ desc.globals.deployment.parameter.sfive_image_version }} + imagePullPolicy: Always + args: + - s5proxy + - -config + - /srv/config/proxy-onion.json + volumeMounts: + - name: home + mountPath: /srv + - name: proxy-config + mountPath: /srv/config + - name: onion-service + image: spreadspace/onion-service:{{ desc.globals.deployment.parameter.onion_service_image_version }} + imagePullPolicy: Always + env: + - name: ONION_HOST + value: "127.0.0.1" + - name: ONION_PORT + value: "8001" + - name: POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + volumeMounts: + - name: onion-lib + mountPath: /var/lib/tor + - name: proxy-config + mountPath: /srv/config +{% endif %} {% endif %} - name: hub image: spreadspace/sfive:{{ desc.globals.deployment.parameter.sfive_image_version }} @@ -63,6 +102,11 @@ spec: - name: home emptyDir: medium: Memory +{% if worker.flags.sfive == 'proxy' and 'stream-onion' in worker.flags %} + - name: onion-lib + emptyDir: + medium: Memory +{% endif %} - name: proxy-config configMap: name: sfive-{{ worker.name }} |