kube/wildduck/rspamd.yaml

80 lines
1.7 KiB
YAML

---
apiVersion: v1
kind: ConfigMap
metadata:
name: rspamd
data:
logging.inc: |
type = console;
level = "notice";
worker-normal.inc: |
bind_socket = "*:11333";
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: rspamd
spec:
replicas: 2
selector:
matchLabels:
app.kubernetes.io/name: rspamd
template:
metadata:
labels:
app.kubernetes.io/name: rspamd
spec:
securityContext:
runAsUser: 1000
runAsNonRoot: true
fsGroup: 1000
containers:
- name: rspamd
image: mirror.gcr.io/codemowers/rspamd
ports:
- containerPort: 11333
name: rspamd
securityContext:
readOnlyRootFilesystem: true
resources:
limits:
cpu: 500m
memory: 2Gi
requests:
cpu: 10m
memory: 400Mi
volumeMounts:
- name: var-lib-rspamd
mountPath: /var/lib/rspamd
- name: var-run
mountPath: /run/rspamd
- name: rspamd-config
mountPath: /etc/rspamd/local.d
readOnly: true
volumes:
- name: var-lib-rspamd
emptyDir:
sizeLimit: 1Gi
- name: var-run
emptyDir:
medium: Memory
- name: var-lib-nginx-tmp
emptyDir:
medium: Memory
- name: rspamd-config
projected:
sources:
- configMap:
name: rspamd
---
apiVersion: v1
kind: Service
metadata:
name: rspamd
spec:
selector:
app.kubernetes.io/name: rspamd
ports:
- port: 11333
name: rspamd