1 files changed, 87 insertions, 0 deletions
diff --git a/templates/default/kubernetes/stream-lb-deploy.yml.j2 b/templates/default/kubernetes/stream-lb-deploy.yml.j2
new file mode 100644
index 0000000..33c8467
--- /dev/null
+++ b/templates/default/kubernetes/stream-lb-deploy.yml.j2
@@ -0,0 +1,87 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: {{ deploy.namespace }}
+  name: stream-lb-{{ deploy.stream }}
+  labels:
+    app: nginx
+    type: stream-lb
+    stream: {{ deploy.stream }}
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: nginx
+      type: stream-lb
+      stream: {{ deploy.stream }}
+  strategy:
+    type: Recreate
+  revisionHistoryLimit: 5
+  template:
+    metadata:
+      labels:
+        app: nginx
+        type: stream-lb
+        stream: {{ deploy.stream }}
+    spec:
+      nodeName: emc-00  ## TODO: hardcoded value
+      securityContext:
+        runAsUser: 998
+        fsGroup: 998
+      hostNetwork: true
+      dnsPolicy: ClusterFirstWithHostNet
+      initContainers:
+      - name: copy-certificates
+        image: busybox
+        command: ['sh', '-c', 'chmod 0750 /srv/acme && cp /var/lib/acme/live/{{ desc.streams[deploy.stream]['lb-hostname'] }}/* /srv/acme && chown -R 998 /srv/acme']
+        securityContext:
+          runAsUser: 0
+        volumeMounts:
+        - name: nginx-cert
+          mountPath: /srv/acme
+        - name: acme-lib
+          mountPath: /var/lib/acme
+      containers:
+      - name: nginx
+        image: spreadspace/nginx-streaming:{{ desc.globals.deployment.parameter.nginx_image_version }}
+        imagePullPolicy: Always
+        args:
+        - nginx
+        - -c
+        - /srv/config/nginx.conf
+        - -g
+        - "daemon off;"
+        volumeMounts:
+        - name: home
+          mountPath: /srv
+        - name: nginx-lib
+          mountPath: /var/lib/nginx
+        - name: nginx-config
+          mountPath: /srv/config
+        - name: www
+          mountPath: /srv/www
+        - name: nginx-cert
+          mountPath: /srv/acme
+        - name: acme-lib
+          mountPath: /var/lib/acme
+      volumes:
+      - name: home
+        emptyDir:
+          medium: Memory
+      - name: nginx-lib
+        emptyDir:
+          medium: Memory
+      - name: nginx-config
+        configMap:
+          name: stream-lb-{{ deploy.stream }}
+      - name: www
+        emptyDir:
+          medium: Memory
+      - name: nginx-cert
+        emptyDir:
+          medium: Memory
+      - name: acme-lib
+        hostPath:
+          type: Directory
+          path: /var/lib/acme
+          readOnly: yes