project userspace part 1

certsigner/pod.yaml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: certsigner
+  namespace: kube-system
+spec:
+  containers:
+  - name: certsigner
+    image: python:latest
+    command: ["cat"]
+    tty: true
+    resources:
+      requests:
+        memory: 1Mi
+        cpu: 1m
+      limits:
+        memory: 100Mi
+        cpu: 100m
+    volumeMounts:
+      - mountPath: /certs
+        name: certs
+      - mountPath: /keys
+        name: keys
+  volumes:
+    - name: certs
+      persistentVolumeClaim:
+        claimName: certsigner-certs
+    - name: keys
+      secret:
+        secretName: certsigner
+  restartPolicy: Always

certsigner/pvc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: certsigner-certs
+  namespace: kube-system
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi