# This file is part of Rok. # # Copyright © 2020-2022 Arrikto Inc. All Rights Reserved. apiVersion: v1 kind: ServiceAccount metadata: name: rok-tools labels: app: rok-tools --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: rok-tools-cluster-admin subjects: - kind: ServiceAccount name: rok-tools namespace: default roleRef: kind: ClusterRole name: cluster-admin apiGroup: rbac.authorization.k8s.io --- apiVersion: v1 kind: Service metadata: name: rok-tools spec: selector: app: rok-tools ports: - protocol: TCP port: 80 targetPort: 80 name: http - protocol: TCP port: 8080 targetPort: 8080 name: port-forward --- apiVersion: apps/v1 kind: StatefulSet metadata: name: rok-tools labels: app: rok-tools spec: replicas: 1 serviceName: rok-tools selector: matchLabels: app: rok-tools template: metadata: labels: app: rok-tools spec: # hostPID: true serviceAccountName: rok-tools containers: - name: rok-tools image: gcr.io/arrikto/rok-tools:release-2.0-l0-release-2.0.2 imagePullPolicy: IfNotPresent workingDir: /root ports: - containerPort: 80 - containerPort: 8080 volumeMounts: - name: data mountPath: /root # securityContext: # privileged: true volumeClaimTemplates: - metadata: name: data spec: accessModes: ["ReadWriteOnce"] resources: requests: storage: 50Gi storageClassName: standard