# Copyright 2021 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. apiVersion: apps/v1 kind: Deployment metadata: name: spec: replicas: 5 selector: matchLabels: app: template: metadata: labels: app: spec: serviceAccountName: volumes: - name: cacert secret: secretName: items: - key: tls.crt path: cert.pem containers: - name: image: ports: - containerPort: 8080 volumeMounts: - name: cacert mountPath: "/etc/ca" readOnly: true env: - name: DB_HOST value: ".default.svc.cluster.local" # using the "default" namespace - name: DB_USER valueFrom: secretKeyRef: name: key: username - name: DB_PASS valueFrom: secretKeyRef: name: key: password - name: DB_NAME valueFrom: secretKeyRef: name: key: database - name: DB_PORT value: "5432" - name: CA_CERT value: "/etc/ca/cert.pem"