Files
@ 1d3d12b7cf6d
Branch filter:
Location: pomerium/upstream/patch.yaml - annotation
1d3d12b7cf6d
992 B
text/x-yaml
move pom cert into make_global.py to share some vars
b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 a8c1e2f028f0 a8c1e2f028f0 a8c1e2f028f0 88fc66e2ebf5 88fc66e2ebf5 88fc66e2ebf5 88fc66e2ebf5 88fc66e2ebf5 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 b53ab97e8979 a8c1e2f028f0 | ---
apiVersion: apps/v1
kind: Deployment
metadata:
name: pomerium
namespace: pomerium
spec:
template:
spec:
containers:
- name: pomerium
# ran:
# ✨ dash(pts/0):/my/serv/pomerium/ingress-controller% IMG=bang5:5000/pomerium_ingress_controller:577 make docker-build
image: bang5:5000/pomerium_ingress_controller:577
resources:
limits:
cpu: 5000m
# getting OOM at the default 1Gi
memory: 5Gi
---
apiVersion: v1
kind: Service
metadata:
name: pomerium-proxy
namespace: pomerium
spec:
externalIPs:
# this would be the fastest if we're running on ditto
- 10.5.0.7
# prime forwards to this
- 10.5.0.1
# local dns picks this
- 10.2.0.1
---
apiVersion: batch/v1
kind: Job
metadata:
name: pomerium-gen-secrets
namespace: pomerium
spec:
template:
spec:
containers:
- name: gen-secrets
image: bang5:5000/pomerium_ingress_controller:577
|