1apiVersion: apps/v1
 2kind: Deployment
 3metadata:
 4  name: honk
 5  labels:
 6    app: honk
 7spec:
 8  selector:
 9    matchLabels:
10      app: honk
11  template:
12    metadata:
13      labels:
14        app: honk
15    spec:
16      securityContext:
17        runAsUser: 1000
18        runAsGroup: 3000
19        fsGroup: 2000
20      containers:
21        - name: honk
22          image: sini:5000/honk:latest
23          volumeMounts:
24            - name: data
25              mountPath: /data
26              readOnly: false
27            - name: certs
28              mountPath: /etc/ssl/certs
29              readOnly: true
30          ports:
31            - name: http
32              containerPort: 8080
33          args:
34            - -datadir
35            - /data
36      volumes:
37        - name: data
38          persistentVolumeClaim:
39            claimName: honk-data
40        - name: certs
41          hostPath:
42            path: /etc/ssl/certs
43---
44apiVersion: v1
45kind: PersistentVolumeClaim
46metadata:
47  name: honk-data
48spec:
49  storageClassName: local-path
50  accessModes:
51    - ReadWriteOnce
52  resources:
53    requests:
54      storage: 5Gi
55---
56apiVersion: v1
57kind: Service
58metadata:
59  name: honk
60spec:
61  selector:
62    app: honk
63  ports:
64    - name: honk-http
65      port: 8080
66      targetPort: 8080
67---
68apiVersion: networking.k8s.io/v1
69kind: Ingress
70metadata:
71  name: h.icyphox.sh
72  namespace: default
73spec:
74  ingressClassName: caddy
75  rules:
76  - host: h.icyphox.sh
77    http:
78      paths:
79      - path: /
80        pathType: Prefix
81        backend:
82          service:
83            name: honk
84            port:
85              number: 8080