barycenter/deploy/helm/barycenter/templates/serviceaccount.yaml at 86c88d8aeeb7e9fcd83e1ac087c52f56ee3a5ef1 - CloudNebulaProject/barycenter - Forgejo: Beyond coding. We forge.

CloudNebulaProject/barycenter

mirror of https://github.com/CloudNebulaProject/barycenter.git synced 2026-04-11 05:30:41 +00:00

Till Wegmueller c8b27bf196

feat: add deployment configurations for multiple platforms

Add comprehensive deployment support for:
- Docker: Multi-stage Dockerfile with security hardening
- Docker Compose: Production-ready compose file with volume persistence
- Kubernetes: Complete Helm chart with configurable values, ingress, PVC
- Linux: systemd service unit with extensive security hardening
- FreeBSD: rc.d init script with proper daemon management
- illumos/Solaris: SMF manifest with service contract management

Each platform includes:
- Installation scripts/manifests
- Configuration examples
- Management instructions
- Security best practices
- Troubleshooting guides

The Helm chart provides:
- Configurable resources and autoscaling
- Security contexts and pod security
- Health checks (liveness/readiness probes)
- Ingress with TLS support
- Persistent volume claims
- Service account management

All deployments follow security best practices:
- Non-root user execution
- Minimal privileges
- Read-only root filesystems where applicable
- Resource limits
- Network policies

Added DEPLOYMENT.md with comprehensive deployment guide covering
all platforms, configuration options, and production checklist.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

2025-11-29 15:30:46 +01:00

12 lines

326 B

YAML

Raw Blame History

 {{- if .Values.serviceAccount.create -}}
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: {{ include "barycenter.serviceAccountName" . }}
   labels:
     {{- include "barycenter.labels" . | nindent 4 }}
   {{- with .Values.serviceAccount.annotations }}
   annotations:
     {{- toYaml . | nindent 4 }}
   {{- end }}
 {{- end }}