36 lines
1.1 KiB
YAML
36 lines
1.1 KiB
YAML
allinone:
|
|
image: neuvector/allinone:0.9
|
|
container_name: neuvector.allinone
|
|
restart: always
|
|
privileged: true
|
|
environment:
|
|
- affinity:com.myself.name!=neuvector
|
|
- CLUSTER_JOIN_ADDR=allinone
|
|
ports:
|
|
- 8443:8443
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- /proc:/host/proc:ro
|
|
- /sys/fs/cgroup:/host/cgroup:ro
|
|
labels:
|
|
com.myself.name: "neuvector"
|
|
io.rancher.scheduler.affinity:host_label: ${NV_ALLINONE_LABEL}
|
|
io.rancher.container.hostname_override: container_name
|
|
enforcer:
|
|
image: neuvector/enforcer:0.9
|
|
container_name: neuvector.enforcer
|
|
restart: always
|
|
privileged: true
|
|
environment:
|
|
- affinity:com.myself.name!=neuvector
|
|
- CLUSTER_JOIN_ADDR=allinone
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- /proc:/host/proc:ro
|
|
- /sys/fs/cgroup/:/host/cgroup/:ro
|
|
labels:
|
|
com.myself.name: "neuvector"
|
|
io.rancher.scheduler.global: true
|
|
io.rancher.scheduler.affinity:host_label_ne: ${NV_ALLINONE_LABEL}
|
|
io.rancher.container.hostname_override: container_name
|