Skip to content

Commit 7bf7faa

Browse files
admission-controller: Update to version master-246
Update 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/admission-controller to version master-246
1 parent 9210388 commit 7bf7faa

File tree

1 file changed

+73
-0
lines changed

1 file changed

+73
-0
lines changed
Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
{{- if eq .Cluster.Provider "zalando-eks"}}
2+
apiVersion: apps/v1
3+
kind: Deployment
4+
metadata:
5+
name: teapot-admission-controller
6+
namespace: kube-system
7+
labels:
8+
application: kubernetes
9+
component: admission-controller
10+
spec:
11+
replicas: 2
12+
selector:
13+
matchLabels:
14+
deployment: teapot-admission-controller
15+
template:
16+
metadata:
17+
labels:
18+
deployment: teapot-admission-controller
19+
application: kubernetes
20+
component: admission-controller
21+
annotations:
22+
logging/destination: "{{.Cluster.ConfigItems.log_destination_infra}}"
23+
spec:
24+
tolerations:
25+
- key: dedicated
26+
value: cluster-seed
27+
effect: NoSchedule
28+
dnsConfig:
29+
options:
30+
- name: ndots
31+
value: "1"
32+
serviceAccountName: admission-controller
33+
priorityClassName: system-cluster-critical
34+
containers:
35+
- name: admission-controller
36+
image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/admission-controller:master-246
37+
lifecycle:
38+
preStop:
39+
exec:
40+
command: ["/bin/sh", "-c", "sleep 60"]
41+
readinessProbe:
42+
httpGet:
43+
scheme: HTTPS
44+
path: /healthz
45+
port: 8085
46+
initialDelaySeconds: 5
47+
timeoutSeconds: 5
48+
resources:
49+
requests:
50+
cpu: 50m
51+
memory: 100Mi
52+
# TODO: limits
53+
args:
54+
- --address=:8085
55+
- --tls-cert-file=/etc/tls-certs/admission-controller.pem
56+
- --tls-key-file=/etc/tls-certs/admission-controller-key.pem
57+
{{- if index .Cluster.ConfigItems "application_registry_url" }}
58+
- --application-registry-url={{.Cluster.ConfigItems.application_registry_url}}
59+
{{- end }}
60+
{{- if index .Cluster.ConfigItems "docker_meta_url" }}
61+
- --docker-meta-url={{.Cluster.ConfigItems.docker_meta_url}}
62+
{{- end }}
63+
ports:
64+
- containerPort: 8085
65+
volumeMounts:
66+
- mountPath: /etc/tls-certs
67+
name: tls-certs
68+
readOnly: true
69+
volumes:
70+
- name: tls-certs
71+
secret:
72+
secretName: admission-controller-tls-certs
73+
{{- end }}

0 commit comments

Comments
 (0)