Skip to content
Permalink
Branch: master
Find file Copy path
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
97 lines (96 sloc) 2.87 KB
apiVersion: apps/v1
kind: Deployment
metadata:
name: {{ template "fullname" . }}-webhook
labels:
app: {{ template "fullname" . }}-webhook
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
release: "{{ .Release.Name }}"
heritage: "{{ .Release.Service }}"
spec:
replicas: 1
strategy:
type: {{ .Values.webhook.updateStrategy }}
minReadySeconds: {{ .Values.webhook.minReadySeconds }}
selector:
matchLabels:
app: {{ template "fullname" . }}-webhook
template:
metadata:
labels:
app: {{ template "fullname" . }}-webhook
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
release: "{{ .Release.Name }}"
releaseRevision: "{{ .Release.Revision }}"
heritage: "{{ .Release.Service }}"
{{ if .Values.webhook.annotations }}
annotations:
{{ toYaml .Values.webhook.annotations | indent 8 }}
{{- end }}
spec:
serviceAccountName: "{{ .Values.webhook.serviceAccount }}"
imagePullSecrets:
{{ toYaml .Values.imagePullSecrets | indent 8 }}
containers:
- name: svr
image: {{ .Values.image }}
imagePullPolicy: {{ .Values.imagePullPolicy }}
resources:
{{ toYaml .Values.webhook.resources | indent 10 }}
args:
- webhook
- --secure-port
- "8443"
- --healthz-server-bind-port
- "8080"
- -v
- "{{ .Values.webhook.verbosity }}"
- --feature-gates
- OriginatingIdentity={{.Values.originatingIdentityEnabled}}
- --feature-gates
- ServicePlanDefaults={{.Values.servicePlanDefaultsEnabled}}
{{- if .Values.namespacedServiceBrokerDisabled }}
- --feature-gates
- NamespacedServiceBroker=false
{{- end }}
ports:
- containerPort: 8443
volumeMounts:
- name: service-catalog-webhook-cert
mountPath: /var/run/service-catalog-webhook
readOnly: true
{{- if .Values.webhook.healthcheck.enabled }}
readinessProbe:
httpGet:
port: 8080
path: /healthz/ready
scheme: HTTP
failureThreshold: 1
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
livenessProbe:
httpGet:
port: 8080
path: /healthz
scheme: HTTP
failureThreshold: 3
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
{{- end }}
{{ if .Values.webhook.nodeSelector }}
nodeSelector:
{{ .Values.webhook.nodeSelector }}
{{ end }}
volumes:
- name: service-catalog-webhook-cert
secret:
secretName: {{ template "fullname" . }}-webhook-cert
items:
- key: tls.crt
path: tls.crt
- key: tls.key
path: tls.key
You can’t perform that action at this time.