mirror of
https://github.com/hanzoai/vault.git
synced 2026-10-30 18:18:35 +00:00
zeekay
cda584c628
- Multi-stage Alpine Dockerfile with non-root user and healthcheck - K8s: namespace (hanzo-vault, PCI zone 3), deployment (Recreate, read-only rootfs, security hardening), service, NetworkPolicies (deny-all default, allow commerce on 8443, allow DNS) - ServiceAccount for RBAC - GitHub Actions: test, build (multi-arch GHCR), Trivy scan, deploy
17 lines
264 B
YAML
17 lines
264 B
YAML
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: vault-service
|
|
namespace: hanzo-vault
|
|
labels:
|
|
app: vault-service
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
- port: 8443
|
|
targetPort: 8443
|
|
protocol: TCP
|
|
name: mtls
|
|
selector:
|
|
app: vault-service
|