charts/goproxy/templates/install.yaml

apiVersion: v1
kind: Service
metadata:
  name: goproxy
  namespace: {{ .Release.Namespace }}
spec:
  type: ClusterIP
  selector:
    app: goproxy
  ports:
  - name: http
    port: {{ .Values.servicePort }}
    targetPort: http
    protocol: TCP
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: goproxy
  namespace: {{ .Release.Namespace }}
spec:
  selector:
    matchLabels:
      app: goproxy
  replicas: 1
  template:
    metadata:
      labels:
        app: goproxy
    spec:
      securityContext:
        fsGroup: 65534
        fsGroupChangePolicy: OnRootMismatch
      containers:
      - name: goproxy
        image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
        imagePullPolicy: {{ .Values.image.pullPolicy }}
        ports:
        - name: http
          containerPort: {{ .Values.port }}
          protocol: TCP
        command:
        - /usr/local/bin/goproxy
        - server
        - --address=:{{ .Values.port }}
        - --cacher-dir=/go/pkg/mod
        env:
        - name: GOMODCACHE
          value: /go/pkg/mod
        volumeMounts:
          - name: cache-volume
            mountPath: /go/pkg/mod
        securityContext:
          runAsUser: 65534
          runAsGroup: 65534
      volumes:
      - name: cache-volume
        persistentVolumeClaim:
          claimName: {{ .Values.persistentVolumeClaimName }}
      tolerations:
      - key: "pcloud"
        operator: "Equal"
        value: "role"
        effect: "NoSchedule"