|
|
@@ -0,0 +1,162 @@
|
|
|
+kind: Deployment
|
|
|
+apiVersion: apps/v1
|
|
|
+metadata:
|
|
|
+ name: desktop-bureau
|
|
|
+ namespace: desktop
|
|
|
+spec:
|
|
|
+ replicas: 0
|
|
|
+ selector:
|
|
|
+ matchLabels:
|
|
|
+ app: desktop-bureau
|
|
|
+ template:
|
|
|
+ metadata:
|
|
|
+ labels:
|
|
|
+ app: desktop-bureau
|
|
|
+ spec:
|
|
|
+ restartPolicy: Always
|
|
|
+ serviceAccountName: selkies-sa
|
|
|
+ schedulerName: default-scheduler
|
|
|
+ affinity:
|
|
|
+ nodeAffinity:
|
|
|
+ requiredDuringSchedulingIgnoredDuringExecution:
|
|
|
+ nodeSelectorTerms:
|
|
|
+ - matchExpressions:
|
|
|
+ - key: kubernetes.io/hostname
|
|
|
+ operator: In
|
|
|
+ values:
|
|
|
+ - bureau.local.pentou.ovh
|
|
|
+ terminationGracePeriodSeconds: 30
|
|
|
+ securityContext:
|
|
|
+ runAsUser: 1000
|
|
|
+ containers:
|
|
|
+ - resources:
|
|
|
+ limits:
|
|
|
+ nvidia.com/gpu: '1'
|
|
|
+ requests:
|
|
|
+ cpu: 200m
|
|
|
+ memory: 1Gi
|
|
|
+ nvidia.com/gpu: '1'
|
|
|
+ stdin: true
|
|
|
+ terminationMessagePath: /dev/termination-log
|
|
|
+ name: selkies-glx
|
|
|
+ env:
|
|
|
+ - name: TZ
|
|
|
+ value: Europe/Paris
|
|
|
+ - name: DISPLAY_SIZEW
|
|
|
+ value: '1920'
|
|
|
+ - name: DISPLAY_SIZEH
|
|
|
+ value: '1080'
|
|
|
+ - name: DISPLAY_REFRESH
|
|
|
+ value: '120'
|
|
|
+ - name: DISPLAY_DPI
|
|
|
+ value: '96'
|
|
|
+ - name: VIDEO_PORT
|
|
|
+ value: HDMI-0
|
|
|
+ - name: DISPLAY_CDEPTH
|
|
|
+ value: '24'
|
|
|
+ - name: PASSWD
|
|
|
+ valueFrom:
|
|
|
+ secretKeyRef:
|
|
|
+ name: my-pass
|
|
|
+ key: my-pass
|
|
|
+ - name: SELKIES_ENCODER
|
|
|
+ value: nvh264enc
|
|
|
+ - name: SELKIES_ENABLE_RESIZE
|
|
|
+ value: 'true'
|
|
|
+ - name: SELKIES_VIDEO_BITRATE
|
|
|
+ value: '40000'
|
|
|
+ - name: SELKIES_FRAMERATE
|
|
|
+ value: '120'
|
|
|
+ - name: SELKIES_AUDIO_BITRATE
|
|
|
+ value: '320000'
|
|
|
+ - name: SELKIES_ENABLE_BASIC_AUTH
|
|
|
+ value: 'true'
|
|
|
+ - name: SELKIES_ENABLE_HTTPS
|
|
|
+ value: 'false'
|
|
|
+ - name: SELKIES_TURN_HOST
|
|
|
+ value: turn.local.pentou.ovh
|
|
|
+ - name: SELKIES_TURN_PORT
|
|
|
+ value: '3478'
|
|
|
+ - name: SELKIES_TURN_PROTOCOL
|
|
|
+ value: UDP
|
|
|
+ - name: SELKIES_TURN_TLS
|
|
|
+ value: 'false'
|
|
|
+ - name: SELKIES_TURN_USERNAME
|
|
|
+ valueFrom:
|
|
|
+ secretKeyRef:
|
|
|
+ name: turn-password
|
|
|
+ key: user
|
|
|
+ - name: SELKIES_TURN_PASSWORD
|
|
|
+ valueFrom:
|
|
|
+ secretKeyRef:
|
|
|
+ name: turn-password
|
|
|
+ key: password
|
|
|
+ - name: LANG
|
|
|
+ value: fr_FR.utf8
|
|
|
+ - name: LANGUAGE
|
|
|
+ value: 'fr_FR:fr'
|
|
|
+ - name: LC_ALL
|
|
|
+ value: fr_FR.UTF-8
|
|
|
+ securityContext:
|
|
|
+ capabilities:
|
|
|
+ add:
|
|
|
+ - SETUID
|
|
|
+ - SETGID
|
|
|
+ privileged: true
|
|
|
+ allowPrivilegeEscalation: true
|
|
|
+ ports:
|
|
|
+ - name: http
|
|
|
+ containerPort: 8080
|
|
|
+ protocol: TCP
|
|
|
+ - name: stream
|
|
|
+ containerPort: 8080
|
|
|
+ protocol: UDP
|
|
|
+ imagePullPolicy: Always
|
|
|
+ volumeMounts:
|
|
|
+ - name: dshm
|
|
|
+ mountPath: /dev/shm
|
|
|
+ - name: egl-cache-vol
|
|
|
+ mountPath: /cache
|
|
|
+ - name: egl-root-vol
|
|
|
+ mountPath: /home/ubuntu
|
|
|
+ - name: custom-certificate-authority
|
|
|
+ mountPath: /usr/local/share/ca-certificates/ocp-certificate.crt
|
|
|
+ subPath: service-ca.crt
|
|
|
+ - name: config-xfce4
|
|
|
+ mountPath: /home/ubuntu/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml
|
|
|
+ subPath: xfce4-panel.xml
|
|
|
+ - name: config-xfce4
|
|
|
+ mountPath: /home/ubuntu/.config/xfce4/xfconf/xfce-perchannel-xml/xsettings.xml
|
|
|
+ subPath: xsettings.xml
|
|
|
+ - name: config-xfce4
|
|
|
+ mountPath: /home/ubuntu/.config/xfce4/xfconf/xfce-perchannel-xml/xfwm4.xml
|
|
|
+ subPath: xfwm4.xml
|
|
|
+ - name: config-xfce4
|
|
|
+ mountPath: /home/ubuntu/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-desktop.xml
|
|
|
+ subPath: xfce4-desktop.xml
|
|
|
+ terminationMessagePolicy: File
|
|
|
+ tty: true
|
|
|
+ image: 'image-registry.openshift-image-registry.svc:5000/desktop/desktop:latest'
|
|
|
+ hostname: desktop-bureau
|
|
|
+ serviceAccount: selkies-sa
|
|
|
+ volumes:
|
|
|
+ - name: dshm
|
|
|
+ emptyDir:
|
|
|
+ medium: Memory
|
|
|
+ - name: egl-cache-vol
|
|
|
+ emptyDir: {}
|
|
|
+ - name: egl-root-vol
|
|
|
+ emptyDir: {}
|
|
|
+ - name: custom-certificate-authority
|
|
|
+ configMap:
|
|
|
+ name: openshift-service-ca.crt
|
|
|
+ defaultMode: 420
|
|
|
+ - name: config-xfce4
|
|
|
+ configMap:
|
|
|
+ name: config-xfce4
|
|
|
+ defaultMode: 420
|
|
|
+ dnsPolicy: ClusterFirst
|
|
|
+ strategy:
|
|
|
+ type: Recreate
|
|
|
+ revisionHistoryLimit: 1
|
|
|
+ progressDeadlineSeconds: 600
|
