1apiVersion: apps/v1
2kind: Deployment
3metadata:
4 name: wireguardctl
5 namespace: vpn
6 labels:
7 platform.edge.ncr.com/component: 'wireguardctl'
8spec:
9 replicas: 1
10 selector:
11 matchLabels:
12 platform.edge.ncr.com/component: 'wireguardctl'
13 template:
14 metadata:
15 labels:
16 platform.edge.ncr.com/component: 'wireguardctl'
17 spec:
18 serviceAccountName: wireguardctl
19 automountServiceAccountToken: true
20 nodeSelector:
21 iam.gke.io/gke-metadata-server-enabled: "true"
22 containers:
23 - name: wireguardctl
24 image: bzl://cmd/sds/remoteaccess/wireguardctl:container_push
25 env:
26 - name: VALIDITY_PERIOD
27 value: '30d'
28 resources:
29 limits:
30 cpu: "100m"
31 memory: 100Mi
32 requests:
33 cpu: 10m
34 memory: 50Mi
35 imagePullPolicy: IfNotPresent
36 imagePullSecrets:
37 - name: edge-docker-pull-secret
View as plain text