apiVersion: v1
kind: ConfigMap
metadata:
  name: deny-nginx-conf
  namespace: magiclab
data:
  default.conf: |
    server {
        listen 8080;
        location / {
            return 403 "Access Denied\n";
        }
    }

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: deny-service
  namespace: magiclab
spec:
  replicas: 1
  selector:
    matchLabels:
      app: deny
  template:
    metadata:
      labels:
        app: deny
    spec:
      containers:
      - image: registry.cn-hangzhou.aliyuncs.com/zhengyu1992/nginx:alpine
        name: nginx
        ports:
        - containerPort: 8080
        volumeMounts:
        - mountPath: /etc/nginx/conf.d
          name: conf
      volumes:
      - configMap:
          name: deny-nginx-conf
        name: conf

---
apiVersion: v1
kind: Service
metadata:
  name: deny-service
  namespace: magiclab
spec:
  ports:
  - port: 8080
    targetPort: 8080
  selector:
    app: deny
  type: ClusterIP