apiVersion: v1
kind: Pod
metadata:
  name: ci
spec:
  containers:
  - name: ci
    image: hysds/cont_int:latest
    ports:
    - containerPort: 22
      name: ssh
    - containerPort: 80
      name: http
    - containerPort: 443
      name: https
    - containerPort: 8080
      name: jenkins
    - containerPort: 8085
      name: dav
    - containerPort: 9001
      name: supervisord
    resources:
      limits:
        cpu: "0.5"
    volumeMounts:
    - mountPath: /var/run/docker.sock
      name: dockersock
    - mountPath: /home/ops/.ssh/id_rsa
      name: global-secrets
      subPath: id_rsa
      readOnly: true
    - mountPath: /home/ops/.ssh/authorized_keys
      name: global-secrets
      subPath: id_rsa.pub
      readOnly: true
    - mountPath: /home/ops/.aws/config
      name: global-config
      subPath: aws_config
      readOnly: true
    - mountPath: /home/ops/.aws/credentials
      name: global-config
      subPath: aws_credentials
      readOnly: true
    - mountPath: /home/ops/verdi/etc/celeryconfig.py
      name: global-config
      subPath: celeryconfig.py
    - mountPath: /home/ops/verdi/etc/datasets.json
      name: global-config
      subPath: datasets.json
    - mountPath: /home/ops/verdi/log
      name: log
    - mountPath: /data/work
      name: work
  volumes:
  - name: dockersock
    hostPath:
      path: /var/run/docker.sock
  - name: global-secrets
    secret:
      secretName: hysds-global-secrets
  - name: global-config
    configMap:
      name: hysds-global-config
  - name: log
    emptyDir: {}
  - name: work
    emptyDir: {}
