---
apiVersion: apps/v1
kind: Deployment
metadata:
name: goldilocks-dashboard
labels:
app.kubernetes.io/name: goldilocks
app.kubernetes.io/component: dashboard
spec:
replicas: 1
selector:
matchLabels:
template:
serviceAccountName: goldilocks-dashboard
containers:
- name: goldilocks
image: "quay.io/fairwinds/goldilocks:master"
imagePullPolicy: Always
command:
- /goldilocks
- dashboard
- --exclude-containers=linkerd-proxy,istio-proxy
- -v3
securityContext:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
runAsNonRoot: true
runAsUser: 10324
capabilities:
drop:
- ALL
ports:
- name: http
containerPort: 8080
protocol: TCP
resources:
requests:
cpu: 25m
memory: 32Mi
limits:
livenessProbe:
httpGet:
path: /health
port: http
readinessProbe: