1
apiVersion: v1
2
kind: ServiceAccount
3
metadata:
4
  name: swagger-kubernetes
5
  namespace: mydlqcloud
6
---
7
kind: Role
8
apiVersion: rbac.authorization.k8s.io/v1beta1
9
metadata:
10
  name: swagger-kubernetes-role
11
  namespace: mydlqcloud
12
rules:
13
  - apiGroups: [""]
14
    resources: ["services","endpoints"]
15
    verbs: ["get","list","watch"]
16
---
17
kind: RoleBinding
18
apiVersion: rbac.authorization.k8s.io/v1
19
metadata:
20
  name: rbac-role-binding
21
  namespace: mydlqcloud
22
subjects:
23
  - kind: ServiceAccount
24
    name: swagger-kubernetes
25
    namespace: mydlqcloud
26
roleRef:
27
  apiGroup: rbac.authorization.k8s.io
28
  kind: Role
29
  name: swagger-kubernetes-role

1
apiVersion: v1
2
kind: Service
3
metadata:
4
  name: swagger-kubernetes
5
  namespace: mydlqcloud
6
  labels:
7
    app: swagger-kubernetes
8
spec:
9
  ports:
10
    - name: tcp
11
      port: 8080
12
      nodePort: 32255
13
      targetPort: 8080
14
  type: NodePort
15
  selector:
16
    app: swagger-kubernetes
17
---
18
apiVersion: apps/v1
19
kind: Deployment
20
metadata:
21
  name: swagger-kubernetes
22
  namespace: mydlqcloud
23
  labels:
24
    app: swagger-kubernetes
25
spec:
26
  selector:
27
    matchLabels:
28
      app: swagger-kubernetes
29
  template:
30
    metadata:
31
      labels:
32
        app: swagger-kubernetes
33
    spec:
34
      serviceAccountName: swagger-kubernetes   #这里引用创建的服务账户，否则可能没有读取服务所在 Namespace 的权限
35
      containers:
36
        - name: swagger-kubernetes
37
          image: mydlqclub/swagger-kubernetes:latest
38
          #国内使用 aliyun 镜像仓库
39
          #image: registry.cn-beijing.aliyuncs.com/mydlq/swagger-kubernetes:latest
40
          imagePullPolicy: IfNotPresent
41
          ports:
42
            - name: server
43
              containerPort: 8080
44
          resources:
45
            limits:
46
              cpu: 2000m
47
              memory: 512Mi
48
            requests:
49
              cpu: 500m
50
              memory: 512Mi