1apiVersion: apps/v1
2kind: StatefulSet
3metadata:
4 name: samhain
5 namespace: fim
6 labels:
7 platform.edge.ncr.com/component: fim
8spec:
9 replicas: 1
10 selector:
11 matchLabels:
12 platform.edge.ncr.com/component: fim
13 template:
14 metadata:
15 labels:
16 platform.edge.ncr.com/component: fim
17 spec:
18 priorityClassName: edge-p4-operability-services
19 initContainers:
20 - name: init-fim
21 image: bzl://cmd/sds/fim:container_push
22 command: ["sh", "/samhain/config/init-script.sh"]
23 resources:
24 limits:
25 cpu: "100m"
26 memory: "120Mi"
27 volumeMounts:
28 - name: config-map
29 mountPath: /samhain/config/samhainrc
30 subPath: samhainrc
31 - name: filter-map
32 mountPath: /samhain/config/filter
33 subPath: filter
34 - name: host-fs
35 readOnly: true
36 mountPath: /ien_fs/
37 - name: samhain-storage
38 mountPath: /samhain/db/
39 imagePullPolicy: IfNotPresent
40 containers:
41 - name: fim
42 image: bzl://cmd/sds/fim:container_push
43 command:
44 - /bin/bash
45 - -c
46 - |
47 /usr/bin/python3 /samhain/config/mount-monitor.py &
48 /samhain/sbin/samhain -t check -p err -f
49 resources:
50 limits:
51 cpu: "100m"
52 memory: "120Mi"
53 volumeMounts:
54 - name: config-map
55 mountPath: /samhain/config/samhainrc
56 subPath: samhainrc
57 - name: samhain-storage
58 mountPath: /samhain/db/
59 - name: host-fs
60 readOnly: true
61 mountPath: /ien_fs/
62 mountPropagation: HostToContainer
63 imagePullPolicy: IfNotPresent
64 tty: true
65 startupProbe:
66 exec:
67 command: [sh, -c, 'cat /samhain/samhain_log | grep "MARK" | tail -1 | grep "TIMESTAMP"']
68 failureThreshold: 60
69 periodSeconds: 10
70 volumes:
71 - name: config-map
72 configMap:
73 name: samhain-config
74 items:
75 - key: samhainrc
76 path: samhainrc
77 - name: filter-map
78 configMap:
79 name: samhain-filter
80 items:
81 - key: filter
82 path: filter
83 - name: host-fs
84 hostPath:
85 type: Directory
86 path: /
87 imagePullSecrets:
88 - name: edge-docker-pull-secret
89 affinity:
90 nodeAffinity:
91 preferredDuringSchedulingIgnoredDuringExecution:
92 - preference:
93 matchExpressions:
94 - key: node.ncr.com/class
95 operator: In
96 values:
97 - server
98 weight: 100
99 volumeClaimTemplates:
100 - metadata:
101 name: samhain-storage
102 labels:
103 platform.edge.ncr.com/component: fim
104 spec:
105 resources:
106 requests:
107 storage: "64M"
108 accessModes: ["ReadWriteOnce"]
109 storageClassName: local-path
110 serviceName: samhain
111 updateStrategy: {}
View as plain text