dp

apiVersion: apps/v1
kind: Deployment
metadata:
  annotations: {}
  labels:
    app/name: openldap
  name: openldap
  namespace: sre
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app/name: openldap
  strategy:
    rollingUpdate:
      maxSurge: 0%
      maxUnavailable: 100%
    type: RollingUpdate
  template:
    metadata:
      creationTimestamp: null
      labels:
        app/name: openldap
    spec:
      containers:
        - env:
            - name: LDAP_LOG_LEVEL
              value: '256'
            - name: LDAP_ORGANISATION
              value: mmm
            - name: LDAP_DOMAIN
              value: mmm.com
            - name: LDAP_BASE_DN
              value: 'dc=mmm,dc=com'
            - name: LDAP_ADMIN_PASSWORD
              value: 123456
            - name: LDAP_CONFIG_PASSWORD
              value: 123456
            - name: LDAP_READONLY_USER
              value: 'false'
            - name: LDAP_RFC2307BIS_SCHEMA
              value: 'false'
            - name: LDAP_BACKEND
              value: mdb
            - name: LDAP_REPLICATION
              value: 'false'
            - name: KEEP_EXISTING_CONFIG
              value: 'false'
            - name: LDAP_REMOVE_CONFIG_AFTER_SETUP
              value: 'true'
            - name: LDAP_TLS
              value: 'true'
            - name: LDAP_TLS_CRT_FILENAME
              value: ldap.crt
            - name: LDAP_TLS_KEY_FILENAME
              value: ldap.key
            - name: LDAP_TLS_DH_PARAM_FILENAME
              value: dhparam.pem
            - name: LDAP_TLS_CA_CRT_FILENAME
              value: ca.crt
            - name: LDAP_TLS_ENFORCE
              value: 'false'
            - name: LDAP_TLS_CIPHER_SUITE
              value: 'SECURE256:-VERS-SSL3.0'
            - name: LDAP_TLS_VERIFY_CLIENT
              value: demand
          image: 'osixia/openldap:1.5.0'
          imagePullPolicy: IfNotPresent
          name: openldap
          ports:
            - containerPort: 389
              hostPort: 389
              name: tcp
              protocol: TCP
            - containerPort: 636
              name: tls
              protocol: TCP

svc

apiVersion: v1
kind: Service
metadata:
  annotations: {}
  labels:
    app/name: openldap
  name: openldap
  namespace: sre
spec:
  ports:
    - name: tcp
      port: 389
      protocol: TCP
      targetPort: 389
    - name: tls
      port: 636
      protocol: TCP
      targetPort: 636
  selector:
    app/name: openldap
  sessionAffinity: None
  type: ClusterIP

发表回复

您的电子邮箱地址不会被公开。 必填项已用*标注

Captcha Code