source-controller.yaml

{{- if .Values.sourcecontroller.create }}
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app.kubernetes.io/instance: {{ .Release.Namespace | quote }}
    app.kubernetes.io/managed-by: {{ .Release.Service | quote }}
    app.kubernetes.io/version: {{ .Chart.AppVersion | quote  }}
    app.kubernetes.io/part-of: flux
    helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
    control-plane: controller
  name: source-controller
spec:
  {{- if kindIs "invalid" .Values.sourcecontroller.replicas }}
  replicas: 1
  {{- else }}
  replicas: {{ .Values.sourcecontroller.replicas  }}
  {{- end}}
  selector:
    matchLabels:
      app: source-controller
  strategy:
    type: Recreate
  template:
    metadata:
      {{- with .Values.sourcecontroller.annotations }}
      annotations: {{ toYaml . | nindent 8 }}
      {{- end }}
      labels:
        app: source-controller
{{ with .Values.sourcecontroller.labels }}{{ toYaml . | indent 8 }}{{ end }}
    spec:
      {{- if .Values.sourcecontroller.initContainers}}
      initContainers:
        {{- toYaml .Values.sourcecontroller.initContainers | nindent 8}}
      {{- end}}
      containers:
      - args:
        {{- if .Values.notificationcontroller.create }}
        - --events-addr={{ .Values.eventsaddr }}
        {{- end}}
        - --watch-all-namespaces={{ .Values.watchallnamespaces }}
        - --log-level={{ .Values.loglevel | default "info" }}
        - --log-encoding=json
        - --enable-leader-election
        - --storage-path=/data
        - --storage-adv-addr=source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local.
        {{- range .Values.sourcecontroller.container.additionalargs }}
        - {{ . }}
        {{- end}}
        env:
        - name: RUNTIME_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        {{- with .Values.sourcecontroller.extraEnv }}
        {{- toYaml . | nindent 8 }}
        {{- end }}
        image: {{ template "template.image" .Values.sourcecontroller }}
        {{- if .Values.sourcecontroller.imagePullPolicy }}
        imagePullPolicy: {{ .Values.sourcecontroller.imagePullPolicy }}
        {{- else }}
        imagePullPolicy: IfNotPresent
        {{- end }}
        livenessProbe:
          httpGet:
            path: /healthz
            port: healthz
        name: manager
        ports:
        - containerPort: 9090
          name: http
          protocol: TCP
        - containerPort: 8080
          name: http-prom
          protocol: TCP
        - containerPort: 9440
          name: healthz
          protocol: TCP
        readinessProbe:
          httpGet:
            path: /
            port: http
        {{- with .Values.sourcecontroller.resources }}
        resources: {{ toYaml . | nindent 10 }}
        {{- end }}
        {{- if .Values.sourcecontroller.securityContext }}
        securityContext: {{ toYaml .Values.sourcecontroller.securityContext | nindent 10 }}
        {{- else }}
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          readOnlyRootFilesystem: true
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
        {{- end}}
        volumeMounts:
        - mountPath: /data
          name: data
        - mountPath: /tmp
          name: tmp
        {{- if .Values.sourcecontroller.volumeMounts }}
        {{- toYaml .Values.sourcecontroller.volumeMounts | nindent 8 }}
        {{- end}}
      {{- if .Values.sourcecontroller.priorityClassName }}
      priorityClassName: {{ .Values.sourcecontroller.priorityClassName | quote }}
      {{- end }}
      securityContext:
        fsGroup: 1337
      serviceAccountName: source-controller
      {{- if .Values.imagePullSecrets }}
      imagePullSecrets: {{ toYaml .Values.imagePullSecrets | nindent 6 }}
      {{- end }}
      terminationGracePeriodSeconds: 10
      volumes:
      - emptyDir: {}
        name: data
      - emptyDir: {}
        name: tmp
      {{- if .Values.sourcecontroller.volumes }}
      {{- toYaml .Values.sourcecontroller.volumes | nindent 6 }}
      {{- end}}
      {{- with .Values.sourcecontroller.nodeSelector }}
      nodeSelector: {{ toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.sourcecontroller.affinity }}
      affinity: {{ toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.sourcecontroller.tolerations }}
      tolerations: {{ toYaml . | nindent 8 }}
      {{- end }}
{{- end }}