Busk: Created page with "# Simple Example ``` --- apiVersion: apps/v1 kind: Deployment metadata: name: nginx labels: app: nginx spec: replicas: 2 selector: matchLabels: app: ngin..."

2025-02-04T15:41:05Z

Created page with "# Simple Example ``` --- apiVersion: apps/v1 kind: Deployment metadata: name: nginx labels: app: nginx spec: replicas: 2 selector: matchLabels: app: ngin..."

New page

# Simple Example
```
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: nginx
labels:
app: nginx
spec:
replicas: 2
selector:
matchLabels:
app: nginx
strategy:
type: Recreate # Ensures old pods are fully replaced
template:
metadata:
labels:
app: nginx
spec:
containers:
- name: nginx
# image: nginx:latest
image: nginx:stable-alpine
imagePullPolicy: Always
ports:
- containerPort: 8080
args:
- "nginx"
- "-g"
- "daemon off;"
- "-c"
- "/etc/nginx/nginx.conf"
volumeMounts:
- name: nginx-config
mountPath: /etc/nginx
volumes:
- name: nginx-config
configMap:
name: nginx-config
---
apiVersion: v1
kind: ConfigMap
metadata:
name: nginx-config
data:
nginx.conf: |
events {}
http {
server {
listen 8080;
location / {
root /usr/share/nginx/html;
index index.html;
}
}
}
---
apiVersion: v1
kind: Service
metadata:
name: nginx
spec:
selector:
app: nginx
ports:
- protocol: TCP
port: 8080 # External service port
targetPort: 8080 # Matches the containerPort in the deployment
type: ClusterIP # Change to LoadBalancer or NodePort if needed
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: nginx
annotations:
nginx.ingress.kubernetes.io/rewrite-target: /
spec:
ingressClassName: nginx
tls:
- hosts:
- insights-demo.dev.mktp.io
secretName: insights-demo-tls # Secret that will hold the TLS certificate
rules:
- host: insights-demo.dev.mktp.io
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: nginx
port:
number: 8080
```

# Restart

```
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: maintenance
namespace: demo
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: cronjob-restart-role
namespace: demo
rules:
- apiGroups: ["apps"]
resources: ["deployments"]
verbs: ["get", "patch"] # Required for rollout restart

---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: cronjob-restart-binding
namespace: demo
subjects:
- kind: ServiceAccount
name: maintenance
namespace: demo
roleRef:
kind: Role
name: cronjob-restart-role
apiGroup: rbac.authorization.k8s.io
---
# kubectl auth can-i patch deployment --as=system:serviceaccount:demo:maintenance -n demo
apiVersion: batch/v1
kind: CronJob
metadata:
name: restart-pods
namespace: demo
spec:
schedule: "0 6 * * *"
# schedule: "0 */1 * * *" # Every 1 hours
# schedule: "0 */6 * * *" # Every 6 hours
# schedule: "20 3 * * *" # Every 6 hours
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
jobTemplate:
spec:
template:
spec:
serviceAccountName: maintenance
containers:
- name: kubectl
image: bitnami/kubectl
command: ["kubectl", "rollout", "restart", "deployment/nginx"]
restartPolicy: Never
```

# Simple Main

```
#!/bin/bash
set -eu
. ../includes/main.sh
if [ "$ENV_NAME" != "dev" ]; then
echo "Skipping demo namespace deploy because not dev environment."
exit 0
fi
kubectl_apply "-f nginx.yaml"
kubectl_apply "-f cron.yaml"
```

Nginx deploy example - Revision history

Busk: Created page with "# Simple Example ``` --- apiVersion: apps/v1 kind: Deployment metadata: name: nginx labels: app: nginx spec: replicas: 2 selector: matchLabels: app: ngin..."