1apiVersion: apps/v1
2kind: Deployment
3metadata:
4 name: firewallctl
5 labels:
6 platform.edge.ncr.com/component: firewallctl
7spec:
8 selector:
9 matchLabels:
10 platform.edge.ncr.com/component: firewallctl
11 template:
12 metadata:
13 labels:
14 platform.edge.ncr.com/component: firewallctl
15 spec:
16 serviceAccountName: firewallctl
17 priorityClassName: edge-p5-non-critical-infra
18 containers:
19 - name: firewallctl
20 image: bzl://cmd/sds/firewallctl:container_push
21 imagePullPolicy: IfNotPresent
22 securityContext:
23 allowPrivilegeEscalation: false
24 readOnlyRootFilesystem: true
25 runAsNonRoot: true
26 runAsUser: 2102
27 seccompProfile:
28 type: RuntimeDefault
29 imagePullSecrets:
30 - name: edge-docker-pull-secret
31 affinity:
32 nodeAffinity:
33 preferredDuringSchedulingIgnoredDuringExecution:
34 - preference:
35 matchExpressions:
36 - key: node.ncr.com/class
37 operator: In
38 values:
39 - server
40 weight: 100
41 strategy:
42 type: RollingUpdate
View as plain text