Template {{/* vim: set filetype=mustache: */}} {{/* Expand the name of the chart. */}} {{- define "name" -}} {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} {{- end -}} {{/* Create a default fully qualified app name. We truncate at 63 chars because . . . */}} {{- define "fullname" -}} {{- $name := default .Chart.Name .Values.nameOverride -}} {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} {{- end -}} apiVersion: apps/v1 kind: Deployment metadata: name: {{ template "fullname" . }} labels: app: {{ template "name" . }} chart: {{ .Chart.Name }}-{{ .Chart.Version }} heritage: {{ .Release.Service }} release: {{ .Release.Name }} spec: replicas: {{ .Values.replicaCount }} template: metadata: {{- if .Values.podAnnotations }} annotations: {{ toYaml .Values.podAnnotations | indent 8 }} {{- end }} labels: app: {{ template "name" . }} release: {{ .Release.Name }} spec: containers: - name: {{ template "name" . }} image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" imagePullPolicy: {{ .Values.image.pullPolicy }} securityContext: {{ toYaml .Values.securityContext | indent 12 }} resources: {{ toYaml .Values.resources | indent 12 }} ports: - name: http containerPort: 80 protocol: TCP

Values replicaCount: 3 image: repository: nginx tag: latest pullPolicy: IfNotExists podSecurityContext: fsGroup: 2000 securityContext: # capabilities: # drop: # - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 10001 resources: limits: cpu: 100m memory: 128Mi requests: cpu: 100m memory: 128Mi Metadata (Chart.yaml) name: wasm-chart version: v0.0.1

Render