agent.yaml.in

---
apiVersion: v1
kind: List
items:
  - apiVersion: v1
    kind: Namespace
    metadata:
      name: weave
  - apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: weave-agent
      namespace: weave
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRole
    metadata:
      name: weave-agent
      labels:
        name: weave-agent
    rules:
      - apiGroups:
          - '*'
        resources:
          - '*'
        verbs:
          - '*'
      - nonResourceURLs:
          - '*'
        verbs:
          - '*'
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRoleBinding
    metadata:
      name: weave-agent
      labels:
        name: weave-agent
    roleRef:
      kind: ClusterRole
      name: weave-agent
      apiGroup: rbac.authorization.k8s.io
    subjects:
      - kind: ServiceAccount
        name: weave-agent
        namespace: weave
  - apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: weave-agent
      namespace: weave
    spec:
      replicas: 1
      selector:
        matchLabels:
          name: weave-agent
      # Wait 30 seconds to see if new version crashes before rolling next pod
      minReadySeconds: 30
      # Rolling update with 1 new instance added before removing any old instances
      strategy:
        rollingUpdate:
          maxUnavailable: 0
          maxSurge: 1

      revisionHistoryLimit: 2
      template:
        metadata:
          labels:
            name: weave-agent
        spec:
          serviceAccountName: weave-agent
          containers:
            - name: agent
              image: @@IMAGE_URL@@
              imagePullPolicy: IfNotPresent
              env:
                - name: WEAVE_CLOUD_TOKEN
                  valueFrom:
                    secretKeyRef:
                      name: weave-cloud
                      key: token
              args:
              - -agent.poll-url={{.Scheme}}://{{.LauncherHostname}}/k8s/agent.yaml?instanceID={{"{{.InstanceID}}"}}
              - -wc.hostname={{.WCHostname}}
              - -wc.token=$(WEAVE_CLOUD_TOKEN)
              - -agent.report-errors=true
              - -agent.cri-endpoint={{.CRIEndpoint}}
              - -agent.read-only={{.ReadOnly}}