kubelatte-ce

1
apiVersion: apps/v1
2
kind: Deployment
3
metadata:
4
  name: kubelatte-ce
5
spec:
6
  replicas: 1
7
  selector:
8
    matchLabels:
9
      app.kubernetes.io/name: kubelatte-ce
10
  template:
11
    metadata:
12
      labels:
13
        app.kubernetes.io/name: kubelatte-ce
14
    spec:
15
      restartPolicy: {{ .Values.restartPolicy }}
16
      serviceAccountName: {{ .Values.serviceAccount.name }}
17
      terminationGracePeriodSeconds: {{ .Values.terminationGracePeriodSeconds }}
18
      {{- if .Values.podSecurityContext.enabled }}
19
      securityContext: {{- omit .Values.podSecurityContext "enabled" | toYaml | nindent 8 }}
20
      {{- end }}
21
      imagePullSecrets:
22
        {{- range .Values.image.pullSecrets }}
23
        - name: {{ . }}
24
        {{- end }}
25
      containers:
26
        - name: kubelatte
27
          {{- if .Values.podSecurityContext.enabled }}
28
          securityContext: {{- omit .Values.containerSecurityContext "enabled" | toYaml | nindent 12 }}
29
          {{- end }}
30
          image: {{ printf "%s/%s:%s" .Values.image.registry .Values.image.repository .Values.image.tag }}
31
          imagePullPolicy: {{ .Values.image.pullPolicy }}
32
          terminationMessagePath: /dev/termination-log
33
          terminationMessagePolicy: File
34
          args:
35
            - '--health-probe-bind-address=:8081'
36
            - '--metrics-bind-address=127.0.0.1:8080'
37
            - '--leader-elect'
38
          env:
39
            - name: KUBERNETES_SERVICE_HOST
40
              value: kubernetes.default.svc.cluster.local
41
            - name: NAMESPACE
42
              valueFrom:
43
                fieldRef:
44
                  apiVersion: v1
45
                  fieldPath: metadata.namespace
46
          envFrom:
47
            - configMapRef:
48
                name: kubelatte-ce-env
49
          {{- if .Values.livenessProbe.enabled }}
50
          livenessProbe:
51
            httpGet:
52
              path: /healthz
53
              port: 8081
54
              scheme: HTTP
55
            initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }}
56
            timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }}
57
            periodSeconds: {{ .Values.livenessProbe.periodSeconds }}
58
            successThreshold: {{ .Values.livenessProbe.successThreshold }}
59
            failureThreshold: {{ .Values.livenessProbe.failureThreshold }}
60
          {{- end }}
61
          ports:
62
            - containerPort: 8443
63
              name: https-8443
64
              protocol: TCP
65
          {{- if .Values.readinessProbe.enabled }}
66
          readinessProbe:
67
            httpGet:
68
              path: /readyz
69
              port: 8081
70
              scheme: HTTP
71
            initialDelaySeconds: {{ .Values.readinessProbe.initialDelaySeconds }}
72
            timeoutSeconds: {{ .Values.readinessProbe.timeoutSeconds }}
73
            periodSeconds: {{ .Values.readinessProbe.periodSeconds }}
74
            successThreshold: {{ .Values.readinessProbe.successThreshold }}
75
            failureThreshold: {{ .Values.readinessProbe.failureThreshold }}
76
          {{- end }}
77

78
          resources:
79
            {{ toYaml .Values.resources | nindent 12 }}
80
          volumeMounts:
81
            - name: kubelatte-dir
82
              mountPath: /var/kubelatte
83
            - name: webhook-certs
84
              readOnly: true
85
              mountPath: /var/webhook/certs
86
      volumes:
87
        - name: kubelatte-dir
88
          emptyDir:
89
            sizeLimit: 500Mi
90
        - name: webhook-certs
91
          secret:
92
            secretName: webhook-cert
93
            defaultMode: 256
94