mward4
9dbe3749ba
- build chain: project, Gitea basic-auth source secret, output ImageStream, BuildConfig (Docker strategy, ubuntu:24.04 base), optional base-image ImageStream and Docker Hub pull secret - runtime: ServiceAccount + least-privilege SCC and its RoleBinding (VShell needs UID 0), PVC for config/certificate, Deployment with ImageStream trigger, ClusterIP Service, passthrough HTTPS Route - all manifests verified with 'oc create --dry-run=client' against the OpenShift 4.22 client scheme (12/12 decode cleanly)
21 lines
664 B
YAML
21 lines
664 B
YAML
# Persistence for the generated server configuration and the self-signed TLS
|
|
# certificate. The entrypoint is pointed at this volume with VSHELL_CONFIG and
|
|
# VSHELL_TLS_P12 in the Deployment, so the vendor defaults and the HttpsFiles/
|
|
# web assets under /usr/local/etc stay visible.
|
|
#
|
|
# The SSH host key path is not redirected here; set HostKeyFilenames in
|
|
# vshelld_config to /data/vshelld_hostkey if you want it to survive restarts too.
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: vshell-data
|
|
namespace: vshell
|
|
labels:
|
|
app.kubernetes.io/name: vshell
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 1Gi
|