keel/deployment/deployment-rbac-whr-sidecar...

215 lines
4.5 KiB
YAML

---
# Source: keel/templates/00-namespace.yaml
apiVersion: v1
kind: Namespace
metadata:
name: "keel"
---
# Source: keel/templates/service-account.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: keel
namespace: keel
labels:
app: keel
chart: keel-0.6.1
release: keel
heritage: Tiller
---
# Source: keel/templates/clusterrole.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
name: keel
name: keel
rules:
- apiGroups: ['*']
resources: ['*']
verbs: ['*']
- nonResourceURLs: ['*']
verbs: ['*']
---
# Source: keel/templates/clusterrolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: keel
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: keel
subjects:
- kind: ServiceAccount
name: keel
namespace: keel
---
# Source: keel/templates/service.yaml
apiVersion: v1
kind: Service
metadata:
name: keel
namespace: keel
labels:
app: keel
chart: keel-0.6.1
release: keel
heritage: Tiller
spec:
type: LoadBalancer
ports:
- port: 9300
targetPort: 9300
protocol: TCP
name: keel
selector:
app: keel
sessionAffinity: None
---
# Source: keel/templates/deployment.yaml
apiVersion: apps/v1beta2
kind: Deployment
metadata:
name: keel
namespace: keel
labels:
app: keel
chart: keel-0.6.1
release: keel
heritage: Tiller
spec:
replicas: 1
selector:
matchLabels:
app: keel
release: keel
template:
metadata:
labels:
app: keel
release: keel
spec:
serviceAccountName: keel
containers:
- name: keel
# Note that we use appVersion to get images tag.
image: "keelhq/keel:0.9.5"
imagePullPolicy: IfNotPresent
command: ["/bin/keel"]
env:
- name: NAMESPACE
value: keel
# Enable polling
- name: POLL
value: "1"
# Enable GCR with pub/sub support
- name: PROJECT_ID
value: ""
- name: PUBSUB
value: "1"
# Enable webhook endpoint
- name: WEBHOOK_ENDPOINT
value: ""
# Enable mattermost endpoint
- name: MATTERMOST_ENDPOINT
value: ""
- name: SLACK_TOKEN
value: ""
- name: SLACK_CHANNELS
value: ""
- name: SLACK_APPROVALS_CHANNEL
value: ""
# Enable hipchat approvials and notification
- name: HIPCHAT_TOKEN
value: ""
- name: HIPCHAT_CHANNELS
value: ""
- name: HIPCHAT_APPROVALS_CHANNEL
value: ""
- name: HIPCHAT_APPROVALS_BOT_NAME
value: ""
- name: HIPCHAT_APPROVALS_USER_NAME
value: ""
- name: HIPCHAT_APPROVALS_PASSWORT
value: ""
- name: NOTIFICATION_LEVEL
value: "info"
# Enable insecure registries
- name: INSECURE_REGISTRY
value: "true"
ports:
- containerPort: 9300
livenessProbe:
httpGet:
path: /healthz
port: 9300
initialDelaySeconds: 30
timeoutSeconds: 10
resources:
limits:
cpu: 100m
memory: 128Mi
requests:
cpu: 50m
memory: 64Mi
- name: webhookrelayd
image: "webhookrelay/webhookrelayd:0.6.3"
imagePullPolicy: IfNotPresent
command: ["/relayd"]
env:
- name: KEY
valueFrom:
secretKeyRef:
name: keel-webhookrelay
key: key
- name: SECRET
valueFrom:
secretKeyRef:
name: keel-webhookrelay
key: secret
- name: BUCKET
value: ""
resources:
limits:
cpu: 100m
memory: 128Mi
requests:
cpu: 50m
memory: 64Mi
---
# Source: keel/templates/pod-disruption-budget.yaml
apiVersion: policy/v1beta1
kind: PodDisruptionBudget
metadata:
name: keel
namespace: keel
spec:
maxUnavailable: 1
selector:
matchLabels:
app: keel
---
# Source: keel/templates/secrets-google.yaml
---
# Source: keel/templates/secrets-webhookrelay.yaml