kubernetes-yaml/learn/learn-kubernetes-master/kiamol/ch16/pi/update/deployment-no-serviceaccount-token.yaml

36 lines
760 B
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: pi-web
labels:
kiamol: ch16
spec:
selector:
matchLabels:
app: pi-web
template:
metadata:
labels:
app: pi-web
spec:
automountServiceAccountToken: false
securityContext:
runAsUser: 65534
runAsGroup: 3000
containers:
- image: kiamol/ch05-pi
command: ["dotnet", "Pi.Web.dll", "-m", "web"]
name: web
ports:
- containerPort: 5001
name: http
env:
- name: ASPNETCORE_URLS
value: http://+:5001
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- all