@@ -408,63 +408,34 @@ This configuration uses a _hostPath_ backed persistent volume claim.
408408{{< /call-out > }}
409409
410410` ` ` yaml
411- apiVersion: apps/ v1
412- kind: Deployment
411+ apiVersion: v1
412+ kind: PersistentVolume
413413metadata:
414- name: nap5-deployment
414+ name: nap5-bundles-pv
415+ labels:
416+ type: local
415417spec:
416- selector:
417- matchLabels:
418- app: nap5
419- replicas: 2
420- template:
421- metadata:
422- labels:
423- app: nap5
424- spec:
425- imagePullSecrets:
426- - name: regcred
427- containers:
428- - name: nginx
429- image: < your-private-registry> /waf:< your-tag>
430- imagePullPolicy: IfNotPresent
431- volumeMounts:
432- - name: app-protect-bd-config
433- mountPath: /opt/app_protect/bd_config
434- - name: app-protect-config
435- mountPath: /opt/app_protect/config
436- - name: waf-enforcer
437- image: private-registry.nginx.com/nap/waf-enforcer:< version-tag>
438- imagePullPolicy: IfNotPresent
439- env:
440- - name: ENFORCER_PORT
441- value: " 50000"
442- volumeMounts:
443- - name: app-protect-bd-config
444- mountPath: /opt/app_protect/bd_config
445- - name: waf-config-mgr
446- image: private-registry.nginx.com/nap/waf-config-mgr:< version-tag>
447- imagePullPolicy: IfNotPresent
448- securityContext:
449- allowPrivilegeEscalation: false
450- capabilities:
451- drop:
452- - all
453- volumeMounts:
454- - name: app-protect-bd-config
455- mountPath: /opt/app_protect/bd_config
456- - name: app-protect-config
457- mountPath: /opt/app_protect/config
458- - name: app-protect-bundles
459- mountPath: /etc/app_protect/bundles
460- volumes:
461- - name: app-protect-bd-config
462- emptyDir: {}
463- - name: app-protect-config
464- emptyDir: {}
465- - name: app-protect-bundles
466- persistentVolumeClaim:
467- claimName: nap5-bundles-pvc
418+ storageClassName: manual
419+ capacity:
420+ storage: 2Gi
421+ accessModes:
422+ - ReadWriteOnce
423+ persistentVolumeReclaimPolicy: Retain
424+ hostPath:
425+ path: " /mnt/nap5_bundles_pv_data"
426+ ---
427+ apiVersion: v1
428+ kind: PersistentVolumeClaim
429+ metadata:
430+ name: nap5-bundles-pvc
431+ spec:
432+ storageClassName: manual
433+ accessModes:
434+ - ReadWriteOnce
435+ resources:
436+ requests:
437+ storage: 2Gi
438+ volumeName: nap5-bundles-pv
468439` ` `
469440
470441{{% /tab %}}
0 commit comments