deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ template "pgadmin4.fullname" . }}
  {{- with .Values.commonLabels }}
  labels: {{ . | toYaml | nindent 4 }}
  {{- end }}
  {{- with .Values.commonAnnotations }}
  annotations: {{ . | toYaml | nindent 4 }}
  {{- end }}
spec:
  replicas: {{ .Values.replicas }}
  {{- if .Values.strategy }}
  strategy:
    type: {{ .Values.strategy.type }}
    {{- if and (eq .Values.strategy.type "RollingUpdate") .Values.strategy.rollingUpdate }}
    rollingUpdate:
      maxSurge: {{ .Values.strategy.rollingUpdate.maxSurge }}
      maxUnavailable: {{ .Values.strategy.rollingUpdate.maxUnavailable }}
    {{- end }}
  {{- end }}
  selector:
    matchLabels:
      app: {{ default "pgadmin4" .Values.commonLabels.app }}
        {{- with omit .Values.commonLabels "app" }}
        {{- . | toYaml | nindent 6 }}
        {{- end }}
  template:
    metadata:
      labels:
        app: {{ default "pgadmin4" .Values.commonLabels.app }}
        {{- with omit .Values.commonLabels "app" }}
        {{- . | toYaml | nindent 8 }}
        {{- end }}
      {{- if or (not (empty .Values.commonAnnotations)) (not .Values.existingSecret) .Values.preferences.enabled .Values.serverDefinitions.enabled }}
      annotations:
        {{- with .Values.commonAnnotations }}
        {{- . | toYaml | nindent 8 }}
        {{- end }}
        {{- if not .Values.existingSecret }}
        checksum/secret: {{ include (print $.Template.BasePath "/secret.yaml") . | sha256sum }}
        {{- end }}
        {{- if and .Values.config_local.enabled (empty .Values.config_local.existingSecret) }}
        checksum/secret-config: {{ include (print $.Template.BasePath "/secret-config.yaml") . | sha256sum }}
        {{- end }}
        {{- if .Values.serverDefinitions.enabled }}
        checksum/configmap-server-definitions: {{ include (print $.Template.BasePath "/configmap-serverDefinitions.yaml") . | sha256sum }}
        {{- end }}
        {{- if .Values.preferences.enabled }}
        checksum/configmap-preferences: {{ include (print $.Template.BasePath "/configmap-preferences.yaml") . | sha256sum }}
        {{- end }}
      {{- end }}
    spec:
      {{- if or .Values.global.imagePullSecrets .Values.image.pullSecrets }}
      imagePullSecrets: {{- concat .Values.global.imagePullSecrets .Values.image.pullSecrets | toYaml | nindent 8 }}
      {{- end }}
      serviceAccountName: {{ template "pgadmin4.serviceAccountName" . }}
      automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
      {{- if .Values.podSecurityContext.enabled }}
      securityContext: {{- include "renderSecurityContext" (dict "securityContext" .Values.podSecurityContext "context" .) | nindent 8 }}
      enableServiceLinks: {{ .Values.enableServiceLinks }}
      {{- end }}
      volumes:
        - name: empty-dir
          emptyDir: {}
      {{- if .Values.persistence.enabled }}
        - name: data
          persistentVolumeClaim:
            claimName: {{ template "pgadmin4.fullname" . }}
      {{- end }}
      {{- if .Values.config_local.enabled }}
        - name: config-local
          secret:
            secretName: {{ default (printf "%s-config" (include "pgadmin4.fullname" .)) .Values.config_local.existingSecret }}
            items:
              - key: {{ .Values.config_local.configKey }}
                path: {{ .Values.config_local.configKey }}
      {{- end }}
      {{- if .Values.serverDefinitions.enabled }}
        - name: server-definitions
          configMap:
            name: {{ template "pgadmin4.fullname" . }}-server-definitions
            items:
              - key: servers.json
                path: servers.json
      {{- end }}
      {{- if .Values.preferences.enabled }}
        - name: preferences
          configMap:
            name: {{ template "pgadmin4.fullname" . }}-preferences
            items:
              - key: preferences.json
                path: preferences.json
      {{- end }}
      {{- with .Values.extraVolumes }}
      {{- . | toYaml | nindent 8 }}
      {{- end }}
      containers:
        - name: pgadmin4
          {{- if .Values.containerSecurityContext.enabled }}
          securityContext: {{- include "renderSecurityContext" (dict "securityContext" .Values.containerSecurityContext "context" .) | nindent 12 }}
          {{- end }}
          image: {{ template "pgadmin4.image" . }}
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          ports:
            - name: http
              protocol: TCP
              containerPort: {{ .Values.containerPort }}
          resources:
            requests:
              cpu: {{ .Values.resources.requests.cpu }}
              memory: {{ .Values.resources.requests.memory }}
            limits:
              cpu: {{ .Values.resources.limits.cpu }}
              memory: {{ .Values.resources.limits.memory }}
          env:
            - name: PGADMIN_DEFAULT_EMAIL
              value: {{ .Values.auth.email }}
            - name: PGADMIN_DEFAULT_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: {{ default (include "pgadmin4.fullname" .) .Values.auth.existingSecret }}
                  key: {{ .Values.auth.passwordKey }}
            - name: PGADMIN_LISTEN_PORT
              value: {{ .Values.containerPort | quote }}
            - name: PGADMIN_DISABLE_POSTFIX
              value: {{ .Values.disablePostfix | quote }}
          {{- with .Values.extraEnvVars }}
          {{- tpl (. | toYaml) $ | nindent 12 }}
          {{- end }}
          volumeMounts:
            - mountPath: /var/lib/pgadmin
              {{- if .Values.persistence.enabled }}
              name: data
              {{- else }}
              name: empty-dir
              subPath: data
              {{- end }}
            - name: empty-dir
              mountPath: /pgadmin4/config_distro.py
              subPath: config_distro.py
            - name: empty-dir
              mountPath: /usr/local/bin/python3
              subPath: python3
            - name: empty-dir
              mountPath: /tmp
              subPath: tmp
            - name: empty-dir
              mountPath: /var/log/pgadmin
              subPath: logs
              {{- if .Values.config_local.enabled }}
            - name: config-local
              mountPath: /pgadmin4/config_local.py
              subPath: {{ .Values.config_local.configKey }}
              {{- end }}
              {{- if .Values.serverDefinitions.enabled }}
            - name: server-definitions
              mountPath: /pgadmin4/servers.json
              subPath: servers.json
              {{- end }}
              {{- if .Values.preferences.enabled }}
            - name: preferences
              mountPath: /pgadmin4/preferences.json
              subPath: preferences.json
              {{- end }}
              {{- with .Values.extraVolumeMounts }}
              {{- . | toYaml | nindent 12 }}
              {{- end }}
          {{- if .Values.startupProbe.enabled }}
          startupProbe: {{- omit .Values.startupProbe "enabled" | toYaml | nindent 12 }}
          {{- end }}
          {{- if .Values.readinessProbe.enabled }}
          readinessProbe: {{- omit .Values.readinessProbe "enabled" | toYaml | nindent 12 }}
          {{- end }}
          {{- if .Values.livenessProbe.enabled }}
          livenessProbe: {{- omit .Values.livenessProbe "enabled" | toYaml | nindent 12 }}
          {{- end }}
      initContainers:
        - name: modify-config-distro-py-permissions
          image: {{ template "pgadmin4.image" . }}
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          command: ["sh", "-x", "-c"]
          args: ['cp /pgadmin4/config_distro.py . && chmod 777 config_distro.py']
          workingDir: /emptyDir
          volumeMounts:
            - name: empty-dir
              mountPath: /emptyDir
          resources:
            requests:
              cpu: 50m
              memory: 64Mi
            limits:
              cpu: 50m
              memory: 64Mi
          {{- if .Values.containerSecurityContext.enabled }}
          securityContext: {{- include "renderSecurityContext" (dict "securityContext" .Values.containerSecurityContext "context" .) | nindent 12 }}
          {{- end }}
        - name: unset-python3-cli-net-cap
          image: {{ template "pgadmin4.image" . }}
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          command: ["sh", "-x", "-c"]
          args: ['ls /venv/bin/python3.* | sort -V -r | head -n 1 | xargs -i cp {} python3']
          workingDir: /emptyDir
          volumeMounts:
            - name: empty-dir
              mountPath: /emptyDir
          resources:
            requests:
              cpu: 50m
              memory: 64Mi
            limits:
              cpu: 50m
              memory: 64Mi
          {{- if .Values.containerSecurityContext.enabled }}
          securityContext: {{- include "renderSecurityContext" (dict "securityContext" .Values.containerSecurityContext "context" .) | nindent 12 }}
          {{- end }}