k8scd/gatus/gatus-deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: gatus
spec:
  replicas: 1
  selector:
    matchLabels:
      app: gatus
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: gatus
    spec:
      containers:
        - name: gatus
          image: twinproduction/gatus:v5.38.0
          env:
            - name: GATUS_CONFIG_PATH
              value: /config/config.yaml
            - name: TZ
              value: Europe/Amsterdam
          envFrom:
            - secretRef:
                name: gatus-ntfy
            # Token for the external endpoints, see backup-check.yaml
            - secretRef:
                name: backup-check-token
          ports:
            - containerPort: 8080
              protocol: TCP
          readinessProbe:
            httpGet:
              path: /health
              port: 8080
          livenessProbe:
            httpGet:
              path: /health
              port: 8080
          resources:
            requests:
              memory: "64Mi"
              cpu: "20m"
            limits:
              memory: "256Mi"
          volumeMounts:
            - name: config
              mountPath: /config
              readOnly: true
            - name: data
              mountPath: /data
            # Trust store without the compromised eMudhra intermediates,
            # see ca-bundle/. Drop once the image ships a fixed bundle.
            - name: patched-ca-bundle
              mountPath: /etc/ssl/certs
              readOnly: true
      volumes:
        - name: config
          configMap:
            name: gatus-config
        - name: data
          persistentVolumeClaim:
            claimName: gatus-data
        - name: patched-ca-bundle
          configMap:
            name: patched-ca-bundle