kubernetes 部署文件 - ss && privoxy 代理客户端

apiVersion: v1
kind: ConfigMap
metadata:
  labels:
    k8s-app: shadowsocks-client
  name: shadowsocks-client-config
data:
  config.json: |
    {
        "server":"47.74.255.255",
        "server_port":6666,
        "local_address": "0.0.0.0",
        "local_port":1080,
        "password":"shadowsocks",
        "timeout":300,
        "method":"aes-256-cfb"
    }

---
kind: Deployment
apiVersion: apps/v1
metadata:
  labels:
    k8s-app: shadowsocks-client
  name: shadowsocks-client
spec:
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      k8s-app: shadowsocks-client
  template:
    metadata:
      labels:
        k8s-app: shadowsocks-client
    spec:
      containers:
      - name: shadowsocks-client
        image: "sgrio/alpine-sslocalproxy"
        ports:
        - containerPort: 1080
          protocol: TCP
        - containerPort: 8118
          protocol: TCP
        volumeMounts:
        - name: config
          mountPath: /etc/shadowsocks-libev
        - name: privoxy-config
          mountPath: /etc/privoxy
      volumes:
      - name: config
        configMap:
          name: shadowsocks-client-config
      - name: privoxy-config
        persistentVolumeClaim:
          claimName: shadowsocks-client-privoxy-config

---
apiVersion: v1
kind: Service
metadata:
  labels:
    k8s-app: shadowsocks-client
  name: shadowsocks-client
spec:
  selector:
    k8s-app: shadowsocks-client
  externalIPs:
  - 172.13.0.52
  ports:
  - name: socks-proxy
    port: 1080
    protocol: TCP
    targetPort: 1080
  - name: http-proxy
    port: 8118
    protocol: TCP
    targetPort: 8118

---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  labels:
    k8s-app: gitlab
  name: shadowsocks-client-privoxy-config
spec:
  accessModes:
  - ReadWriteMany
  resources:
    requests:
      storage: 1Mi
  storageClassName: shadowsocks-client-privoxy-config

---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: nfs-172.13.0.51-privoxy-config
spec:
  accessModes:
  - ReadWriteMany
  capacity:
    storage: 1Gi
  volumeMode: Filesystem
  storageClassName: shadowsocks-client-privoxy-config
  nfs:
    path: /docker/volumes/privoxy
    server: 172.13.0.60
  persistentVolumeReclaimPolicy: Retain

---