File tree Expand file tree Collapse file tree 1 file changed +73
-0
lines changed
cluster/manifests/02-admission-control Expand file tree Collapse file tree 1 file changed +73
-0
lines changed Original file line number Diff line number Diff line change
1
+ {{- if eq .Cluster.Provider "zalando-eks"}}
2
+ apiVersion : apps/v1
3
+ kind : Deployment
4
+ metadata :
5
+ name : teapot-admission-controller
6
+ namespace : kube-system
7
+ labels :
8
+ application : kubernetes
9
+ component : admission-controller
10
+ spec :
11
+ replicas : 2
12
+ selector :
13
+ matchLabels :
14
+ deployment : teapot-admission-controller
15
+ template :
16
+ metadata :
17
+ labels :
18
+ deployment : teapot-admission-controller
19
+ application : kubernetes
20
+ component : admission-controller
21
+ annotations :
22
+ logging/destination : " {{.Cluster.ConfigItems.log_destination_infra}}"
23
+ spec :
24
+ tolerations :
25
+ - key : dedicated
26
+ value : cluster-seed
27
+ effect : NoSchedule
28
+ dnsConfig :
29
+ options :
30
+ - name : ndots
31
+ value : " 1"
32
+ serviceAccountName : admission-controller
33
+ priorityClassName : system-cluster-critical
34
+ containers :
35
+ - name : admission-controller
36
+ image : 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/admission-controller:master-246
37
+ lifecycle :
38
+ preStop :
39
+ exec :
40
+ command : ["/bin/sh", "-c", "sleep 60"]
41
+ readinessProbe :
42
+ httpGet :
43
+ scheme : HTTPS
44
+ path : /healthz
45
+ port : 8085
46
+ initialDelaySeconds : 5
47
+ timeoutSeconds : 5
48
+ resources :
49
+ requests :
50
+ cpu : 50m
51
+ memory : 100Mi
52
+ # TODO: limits
53
+ args :
54
+ - --address=:8085
55
+ - --tls-cert-file=/etc/tls-certs/admission-controller.pem
56
+ - --tls-key-file=/etc/tls-certs/admission-controller-key.pem
57
+ {{- if index .Cluster.ConfigItems "application_registry_url" }}
58
+ - --application-registry-url={{.Cluster.ConfigItems.application_registry_url}}
59
+ {{- end }}
60
+ {{- if index .Cluster.ConfigItems "docker_meta_url" }}
61
+ - --docker-meta-url={{.Cluster.ConfigItems.docker_meta_url}}
62
+ {{- end }}
63
+ ports :
64
+ - containerPort : 8085
65
+ volumeMounts :
66
+ - mountPath : /etc/tls-certs
67
+ name : tls-certs
68
+ readOnly : true
69
+ volumes :
70
+ - name : tls-certs
71
+ secret :
72
+ secretName : admission-controller-tls-certs
73
+ {{- end }}
You can’t perform that action at this time.
0 commit comments