54 lines
1.3 KiB
YAML
54 lines
1.3 KiB
YAML
|
---
|
||
|
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/apps.emqx.io/emqx_v2beta1.json
|
||
|
apiVersion: apps.emqx.io/v2beta1
|
||
|
kind: EMQX
|
||
|
metadata:
|
||
|
name: emqx
|
||
|
spec:
|
||
|
image: public.ecr.aws/emqx/emqx:5.7.2
|
||
|
config:
|
||
|
data: |
|
||
|
authentication {
|
||
|
backend = "built_in_database"
|
||
|
mechanism = "password_based"
|
||
|
password_hash_algorithm {
|
||
|
name = "bcrypt",
|
||
|
}
|
||
|
user_id_type = "username"
|
||
|
bootstrap_file = "/opt/init-user.json"
|
||
|
bootstrap_type = "plain"
|
||
|
}
|
||
|
authorization {
|
||
|
sources = [
|
||
|
{
|
||
|
type = built_in_database
|
||
|
enable = true
|
||
|
}
|
||
|
]
|
||
|
no_match: "deny"
|
||
|
}
|
||
|
coreTemplate:
|
||
|
metadata:
|
||
|
annotations:
|
||
|
reloader.stakater.com/auto: "true"
|
||
|
spec:
|
||
|
replicas: 1
|
||
|
envFrom:
|
||
|
- secretRef:
|
||
|
name: emqx-secret
|
||
|
extraVolumeMounts:
|
||
|
- name: init-user
|
||
|
mountPath: /opt/init-user.json
|
||
|
subPath: init-user.json
|
||
|
readOnly: true
|
||
|
extraVolumes:
|
||
|
- name: init-user
|
||
|
secret:
|
||
|
secretName: emqx-init-user-secret
|
||
|
listenersServiceTemplate:
|
||
|
metadata:
|
||
|
annotations:
|
||
|
io.cilium/lb-ipam-ips: 10.1.1.38
|
||
|
spec:
|
||
|
type: LoadBalancer
|