devtron/manifests/yamls/image-scanner.yaml at c237d91c4c1502aaedfea3eb593afb546f9d989b · devtron-labs/devtron · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
# Source: image-scanner-new/templates/secret.yaml
apiVersion: v1
kind: Secret
metadata:
  name: image-scanner-secret
  labels:
    release: devtron
type: Opaque
---
# Source: image-scanner-new/templates/configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: image-scanner-cm
  labels:
    release: devtron
data:
  CLAIR_ADDR: clair.devtroncd:6060
  CLIENT_ID: client-2
  NATS_SERVER_HOST: nats://devtron-nats.devtroncd:4222
  PG_ADDR: postgresql-postgresql.devtroncd
  PG_DATABASE: orchestrator
  PG_LOG_QUERY: "false"
  PG_PORT: "5432"
  PG_USER: postgres
---
# Source: image-scanner-new/templates/service.yaml
apiVersion: v1
kind: Service
metadata:
  name: image-scanner-service
  labels:
    app: image-scanner
    chart: image-scanner-3.9.1
    release: devtron
spec:
  type: ClusterIP
  ports:
    - port: 80
      targetPort: app
      protocol: TCP
      name: app
  selector:
    app: image-scanner
---
# Source: image-scanner-new/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: image-scanner
  labels:
    app: image-scanner
    chart: image-scanner-3.9.1
    release: devtron
spec:
  selector:
    matchLabels:
      app: image-scanner
      release: devtron
  replicas: 1
  minReadySeconds: 60
  template:
    metadata:
      labels:
        app: image-scanner
        release: devtron
    spec:
      terminationGracePeriodSeconds: 30
      restartPolicy: Always
      securityContext:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
      containers:
        - name: image-scanner
          image: "quay.io/devtron/image-scanner:0a3d5e84-141-28953"
          imagePullPolicy: IfNotPresent
          securityContext:
            allowPrivilegeEscalation: false
            runAsUser: 1000
            runAsNonRoot: true
          ports:
            - name: app
              containerPort: 8080
              protocol: TCP
          env:
            - name: CONFIG_HASH
              value: 66ea130a3a759ac13165931cc6c106f5a9d40a01171b38982715b5570351134a
            - name: SECRET_HASH
              value: dab9f1b9549ed81db8bca66052d574b870a25e69d1845100d5c0d0368fbf3ee0
            - name: DEVTRON_APP_NAME
              value: image-scanner
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
          envFrom:
          - configMapRef:
              name: image-scanner-cm
          - secretRef:
              name: image-scanner-secret
          volumeMounts: []
      volumes: []
  revisionHistoryLimit: 3