Skip to content

Commit 7d2950f

Browse files
committed
updated storage
1 parent 3d3aaed commit 7d2950f

File tree

1 file changed

+26
-55
lines changed

1 file changed

+26
-55
lines changed

content/waf/install/kubernetes.md

Lines changed: 26 additions & 55 deletions
Original file line numberDiff line numberDiff line change
@@ -408,63 +408,34 @@ This configuration uses a _hostPath_ backed persistent volume claim.
408408
{{< /call-out >}}
409409

410410
```yaml
411-
apiVersion: apps/v1
412-
kind: Deployment
411+
apiVersion: v1
412+
kind: PersistentVolume
413413
metadata:
414-
name: nap5-deployment
414+
name: nap5-bundles-pv
415+
labels:
416+
type: local
415417
spec:
416-
selector:
417-
matchLabels:
418-
app: nap5
419-
replicas: 2
420-
template:
421-
metadata:
422-
labels:
423-
app: nap5
424-
spec:
425-
imagePullSecrets:
426-
- name: regcred
427-
containers:
428-
- name: nginx
429-
image: <your-private-registry>/waf:<your-tag>
430-
imagePullPolicy: IfNotPresent
431-
volumeMounts:
432-
- name: app-protect-bd-config
433-
mountPath: /opt/app_protect/bd_config
434-
- name: app-protect-config
435-
mountPath: /opt/app_protect/config
436-
- name: waf-enforcer
437-
image: private-registry.nginx.com/nap/waf-enforcer:<version-tag>
438-
imagePullPolicy: IfNotPresent
439-
env:
440-
- name: ENFORCER_PORT
441-
value: "50000"
442-
volumeMounts:
443-
- name: app-protect-bd-config
444-
mountPath: /opt/app_protect/bd_config
445-
- name: waf-config-mgr
446-
image: private-registry.nginx.com/nap/waf-config-mgr:<version-tag>
447-
imagePullPolicy: IfNotPresent
448-
securityContext:
449-
allowPrivilegeEscalation: false
450-
capabilities:
451-
drop:
452-
- all
453-
volumeMounts:
454-
- name: app-protect-bd-config
455-
mountPath: /opt/app_protect/bd_config
456-
- name: app-protect-config
457-
mountPath: /opt/app_protect/config
458-
- name: app-protect-bundles
459-
mountPath: /etc/app_protect/bundles
460-
volumes:
461-
- name: app-protect-bd-config
462-
emptyDir: {}
463-
- name: app-protect-config
464-
emptyDir: {}
465-
- name: app-protect-bundles
466-
persistentVolumeClaim:
467-
claimName: nap5-bundles-pvc
418+
storageClassName: manual
419+
capacity:
420+
storage: 2Gi
421+
accessModes:
422+
- ReadWriteOnce
423+
persistentVolumeReclaimPolicy: Retain
424+
hostPath:
425+
path: "/mnt/nap5_bundles_pv_data"
426+
---
427+
apiVersion: v1
428+
kind: PersistentVolumeClaim
429+
metadata:
430+
name: nap5-bundles-pvc
431+
spec:
432+
storageClassName: manual
433+
accessModes:
434+
- ReadWriteOnce
435+
resources:
436+
requests:
437+
storage: 2Gi
438+
volumeName: nap5-bundles-pv
468439
```
469440

470441
{{% /tab %}}

0 commit comments

Comments
 (0)