-
Notifications
You must be signed in to change notification settings - Fork 29
/
deployment.yaml
107 lines (107 loc) · 3.78 KB
/
deployment.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
apiVersion: apps/v1
kind: Deployment
metadata:
name: gardener-metrics-exporter
namespace: {{ .Release.Namespace }}
labels:
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
release: "{{ .Release.Name }}"
heritage: "{{ .Release.Service }}"
spec:
replicas: 1
selector:
matchLabels:
app: gardener
role: metrics-exporter
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
release: "{{ .Release.Name }}"
heritage: "{{ .Release.Service }}"
template:
metadata:
labels:
app: gardener
role: metrics-exporter
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
release: "{{ .Release.Name }}"
heritage: "{{ .Release.Service }}"
networking.gardener.cloud/to-dns: allowed
networking.resources.gardener.cloud/to-virtual-garden-kube-apiserver-tcp-443: allowed
spec:
{{- if not .Values.global.virtualGarden.enabled }}
serviceAccountName: gardener-metrics-exporter
{{- else if and .Values.global.virtualGarden.enabled .Values.global.virtualGarden.user.name }}
{{- if .Values.global.serviceAccountTokenVolumeProjection.enabled }}
serviceAccountName: gardener-metrics-exporter
{{- else }}
serviceAccountName: default
{{- end }}
{{- else }}
serviceAccountName: default
{{- end }}
{{- if .Values.global.kubeconfig }}
automountServiceAccountToken: false
{{- end }}
containers:
- name: gardener-metrics-exporter
image: "{{ include "image" .Values.global.image }}"
imagePullPolicy: {{ .Values.global.image.pullPolicy }}
command:
- /gardener-metrics-exporter
{{- if .Values.global.kubeconfig }}
- --kubeconfig=/etc/config/kubeconfig
{{- end }}
- --bind-address={{ .Values.global.server.bindAddress }}
- --port={{ .Values.global.server.port }}
{{- if or .Values.global.kubeconfig .Values.global.serviceAccountTokenVolumeProjection.enabled }}
volumeMounts:
{{- end }}
{{- if .Values.global.kubeconfig }}
- name: config
mountPath: /etc/config
readOnly: true
{{- end }}
{{- if .Values.global.serviceAccountTokenVolumeProjection.enabled }}
- name: service-account-token
mountPath: /var/run/secrets/projected/serviceaccount
readOnly: true
{{- end }}
ports:
- name: port
containerPort: {{ .Values.global.server.port }}
{{- if .Values.global.resources }}
resources:
{{- toYaml .Values.global.resources | nindent 10 }}
{{- end }}
{{- if .Values.global.securityContext }}
securityContext:
{{- toYaml .Values.global.securityContext | nindent 10 }}
{{- end }}
livenessProbe:
httpGet:
path: /
port: 2718
periodSeconds: 5
readinessProbe:
httpGet:
path: /metrics
port: 2718
periodSeconds: 5
{{- if or .Values.global.kubeconfig .Values.global.serviceAccountTokenVolumeProjection.enabled }}
volumes:
{{- end }}
{{- if .Values.global.kubeconfig }}
- name: config
secret:
secretName: gardener-metrics-exporter-config
{{- end }}
{{- if .Values.global.serviceAccountTokenVolumeProjection.enabled }}
- name: service-account-token
projected:
sources:
- serviceAccountToken:
path: token
expirationSeconds: {{ .Values.global.serviceAccountTokenVolumeProjection.expirationSeconds }}
{{- if .Values.global.serviceAccountTokenVolumeProjection.audience }}
audience: {{ .Values.global.serviceAccountTokenVolumeProjection.audience }}
{{- end }}
{{- end }}