Traefik: do not use dynamic config using docker provider; user hostmode networking

2022-12-08 19:05:03 +00:00
parent 0b00ee06a4
commit b5b7b70f62
5 changed files with 122 additions and 101 deletions
@@ -0,0 +1,38 @@
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  annotations:
+    bind-mount-options:/data/nbitwebsite/document_root: z
+    io.kubernetes.cri-o.TTY/nbitwebsite: "false"
+    io.podman.annotations.autoremove/nbitwebsite: "FALSE"
+    io.podman.annotations.init/nbitwebsite: "FALSE"
+    io.podman.annotations.label/nbitwebsite: type:container_runtime_t
+    io.podman.annotations.privileged/nbitwebsite: "FALSE"
+    io.podman.annotations.publish-all/nbitwebsite: "FALSE"
+  labels:
+    app: nbitwebsite-pod
+  name: nbitwebsite-pod
+spec:
+  containers:
+  - image: docker.io/library/nginx:latest
+    name: nginx
+    ports:
+    - containerPort: 80
+      hostPort: 9000
+      hostIP: 127.0.0.1
+    securityContext:
+      capabilities:
+        drop:
+        - CAP_MKNOD
+        - CAP_AUDIT_WRITE
+      seLinuxOptions:
+        type: container_runtime_t
+    volumeMounts:
+    - mountPath: /usr/share/nginx/html
+      name: data-nbitwebsite-host-0
+  volumes:
+  - hostPath:
+      path: /data/nbitwebsite/document_root
+      type: Directory
+    name: data-nbitwebsite-host-0