Kubernetes Deployment Based on Manifests¶

apiVersion: v1
kind: ConfigMap
metadata:
  name: wallarm-sidecar-nginx-conf
data:
  default: |
      server {
          listen 80 default_server;
          listen [::]:80 default_server ipv6only=on;
          server_name localhost;
          root /usr/share/nginx/html;
          index index.html index.htm;
          # Please replace <WALLARM_MODE> below by the request filtration mode: 
          # off to disable request processing
          # monitoring to process but not block requests
          # safe_blocking to block only those malicious requests originated from greylisted IPs
          # block to process all requests and block the malicious ones
          wallarm_mode <WALLARM_MODE>;
          # wallarm_instance 1;
          set_real_ip_from 0.0.0.0/0;
          real_ip_header X-Forwarded-For;
          location / {
                  # Please replace <APP_CONTAINER_PORT> below by the port number
                  # on which the container accepts incoming requests,
                  # the value must be identical to ports.containerPort
                  # in definition of your main app container
                  proxy_pass http://localhost:<APP_CONTAINER_PORT>;
                  include proxy_params;
          }
      }

apiVersion: apps/v1
kind: Deployment
metadata:
  name: myapp
spec:
  selector:
    matchLabels:
      app: myapp
  template:
    metadata:
      labels:
        app: myapp
    spec:
      containers: 
      # Definition of your main app container
      - name: myapp 
        image: <Image>
        resources:
          limits:
            memory: "128Mi"
            cpu: "500m"
        ports:
        # Port on which the application container accepts incoming requests
        - containerPort: 8080 

apiVersion: apps/v1
kind: Deployment
metadata:
  name: myapp
spec:
  selector:
    matchLabels:
      app: myapp
  template:
    metadata:
      labels:
        app: myapp
    spec:
      containers:
        # Wallarm element: definition of Wallarm sidecar container
        - name: wallarm
          image: wallarm/node:3.4.0-1
          imagePullPolicy: Always
          env:
          # Wallarm API endpoint: 
          # "api.wallarm.com" for the EU cloud
          # "us1.api.wallarm.com" for the US cloud
          - name: WALLARM_API_HOST
            value: "api.wallarm.com"
          # Username of the user with the Deploy role
          - name: DEPLOY_USER
            value: "username"
          # Password of the user with the Deploy role
          - name: DEPLOY_PASSWORD
            value: "password"
          - name: DEPLOY_FORCE
            value: "true"
          # Amount of memory in GB for request analytics data, 
          # recommended value is 75% of the total server memory
          - name: TARANTOOL_MEMORY_GB
            value: "2"
          ports:
          - name: http
            # Port on which the Wallarm sidecar container accepts requests 
            # from the Service object
            containerPort: 80
          volumeMounts: 
          - mountPath: /etc/nginx/sites-enabled 
            readOnly: true  
            name: wallarm-nginx-conf
        # Definition of your main app container
        - name: myapp
          image: <Image>
          resources:
            limits:
              memory: "128Mi"
              cpu: "500m"
          ports:
          # Port on which the application container accepts incoming requests
          - containerPort: 8080
      volumes:
      # Wallarm element: definition of the wallarm-nginx-conf volume
      - name: wallarm-nginx-conf
        configMap:
          name: wallarm-sidecar-nginx-conf
          items:
            - key: default
              path: default

apiVersion: v1
kind: Service
metadata:
  name: myapp
  labels:
    run: myapp
spec:
  type: NodePort
  ports:
  - port: 80
    targetPort: 8080
    protocol: TCP
    name: http
  selector:
    run: myapp

...
  ports:
  - port: 80
    targetPort: 80
    protocol: TCP
    name: http
  selector:
    run: myapp