docker-openldap/example/kubernetes/using-secrets/gce-statefullset.yaml

59 lines
1.6 KiB
YAML

apiVersion: apps/v1beta1
kind: StatefulSet
metadata:
name: ldap
spec:
serviceName: "ldap"
replicas: 1
template:
metadata:
labels:
pod: ldap
spec:
containers:
- name: azaldap
image: osixia/openldap:1.5.0
imagePullPolicy: IfNotPresent
#command: ["/bin/bash","-c","while [ 1 = 1 ] ; do sleep 1; date; done"]
ports:
- containerPort: 389
volumeMounts:
- mountPath: /var/lib/ldap
name: ldap-data
- mountPath: /etc/ldap/slapd.d
name: ldap-config
- mountPath: /container/service/slapd/assets/certs
name: ldap-certs
- mountPath: /container/environment/01-custom
name: secret-volume
- mountPath: /container/run
name: container-run
volumes:
- name: "secret-volume"
secret:
secretName: "ldap-secret"
- name: container-run
emptyDir: {}
volumeClaimTemplates:
- metadata:
name: ldap-data
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
- metadata:
name: ldap-config
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 10Mi
- metadata:
name: ldap-certs
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 10Mi