pod del controller: add serviceaccount/rbac

fix: container use entrypoint so args[0] is already passed
fix: deployment strategy

Signed-off-by: Sandor Szücs <[email protected]>

Author: szuecs

cluster/manifests/skipper/01-rbac-pod-deletion-cost-controller.yaml

@@ -0,0 +1,42 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: pod-deletion-cost-controller
+  namespace: kube-system
+  labels:
+    application: skipper-ingress
+    component: pod-deletion-cost-controller
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: pod-deletion-cost-controller
+  labels:
+    application: skipper-ingress
+    component: pod-deletion-cost-controller
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+    verbs:
+      - get
+      - list
+      - watch
+      - update
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: pod-deletion-cost-controller
+  labels:
+    application: skipper-ingress
+    component: pod-deletion-cost-controller
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: pod-deletion-cost-controller
+subjects:
+  - kind: ServiceAccount
+    name: pod-deletion-cost-controller
+    namespace: kube-system

cluster/manifests/skipper/pod-deletion-cost-controller.yaml

@@ -13,24 +13,22 @@ spec:
     matchLabels:
       deployment: pod-deletion-cost-controller
   strategy:
-    rollingUpdate:
-      maxSurge: 1
-      maxUnavailable: 0
-    type: RollingUpdate
+    type: Recreate
   template:
     metadata:
       labels:
         application: skipper-ingress
         component: pod-deletion-cost-controller
         deployment: pod-deletion-cost-controller
     spec:
+      priorityClassName: "{{ .Cluster.ConfigItems.system_priority_class }}"
+      serviceAccountName: pod-deletion-cost-controller
       containers:
       - args:
-        - /pod-deletion-cost-controller
         - -address=:8080
         - -log-level=INFO
         image: container-registry.zalando.net/gwproxy/pod-deletion-cost-controller:main-18
-        name: skipper-ingress-pod-deletion-cost-controller
+        name: pod-deletion-cost-controller
         ports:
         - containerPort: 8080
           name: metrics