在Kubernetes中部署PlantUML服务器：高效、安全的图表即服务

# ====================== Deployment 核心配置 ======================
apiVersion: apps/v1
kind: Deployment
metadata:
  name: plantuml-server
  namespace: bt-tsp-operation-test  # 隔离测试环境
  labels:
    k8s-app: plantuml-server        # 服务标识
spec:
  replicas: 1                       # 单副本节省资源
  revisionHistoryLimit: 3            # 保留3个历史版本便于回滚
  selector:
    matchLabels:
      k8s-app: plantuml-server
  template:
    metadata:
      labels:
        k8s-app: plantuml-server
    spec:
      securityContext:               # 安全加固
        runAsUser: 1000              # 非root用户
        fsGroup: 1000                # 文件权限控制
      containers:
        - name: plantuml
          image: plantuml/plantuml-server:jetty  # 官方轻量镜像
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 8080    # 应用监听端口
          env:
            - name: JAVA_TOOL_OPTIONS
              value: "-Xmx350m -Djava.awt.headless=true"  # JVM优化
          resources:                 # 智能资源分配
            requests:                # 基本保障资源
              cpu: "100m"            # 0.1核CPU
              memory: "256Mi"        # 256MB内存
            limits:                  # 突发流量上限
              cpu: "500m"
              memory: "1Gi"
          livenessProbe:             # 健康监测双保险
            httpGet:
              path: /
              port: 8080
            initialDelaySeconds: 30   # 允许启动时间
            periodSeconds: 10
          readinessProbe:
            httpGet:
              path: /
              port: 8080
            initialDelaySeconds: 5    # 快速接入流量
            periodSeconds: 10

# ====================== Service 网络配置 ======================
---
apiVersion: v1
kind: Service
metadata:
  name: plantuml-service
  namespace: bt-tsp-operation-test
spec:
  type: NodePort                    # 节点直连暴露
  selector:
    k8s-app: plantuml-server        # 关联Pod
  ports:
    - protocol: TCP
      port: 80                      # 集群内访问端口
      targetPort: 8080              # 容器实际端口
      nodePort: 30080               # 外部访问端口