Merge pull request #7975 from zalando-incubator/deploy/pod-deletion-cost-controller

deploy: pod deletion cost controller

Author: szuecs

cluster/manifests/skipper/01-rbac-pod-deletion-cost-controller.yaml

@@ -0,0 +1,42 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: pod-deletion-cost-controller
+  namespace: kube-system
+  labels:
+    application: skipper-ingress
+    component: pod-deletion-cost-controller
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: pod-deletion-cost-controller
+  labels:
+    application: skipper-ingress
+    component: pod-deletion-cost-controller
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+    verbs:
+      - get
+      - list
+      - watch
+      - update
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: pod-deletion-cost-controller
+  labels:
+    application: skipper-ingress
+    component: pod-deletion-cost-controller
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: pod-deletion-cost-controller
+subjects:
+  - kind: ServiceAccount
+    name: pod-deletion-cost-controller
+    namespace: kube-system

cluster/manifests/skipper/pod-deletion-cost-controller.yaml

@@ -0,0 +1,56 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    application: skipper-ingress
+    component: pod-deletion-cost-controller
+  name: pod-deletion-cost-controller
+  namespace: kube-system
+spec:
+  replicas: 1
+  revisionHistoryLimit: 3
+  selector:
+    matchLabels:
+      deployment: pod-deletion-cost-controller
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        application: skipper-ingress
+        component: pod-deletion-cost-controller
+        deployment: pod-deletion-cost-controller
+    spec:
+      priorityClassName: "{{ .Cluster.ConfigItems.system_priority_class }}"
+      serviceAccountName: pod-deletion-cost-controller
+      containers:
+      - args:
+        - -address=:8080
+        - -log-level=INFO
+        image: container-registry.zalando.net/gwproxy/pod-deletion-cost-controller:main-18
+        name: pod-deletion-cost-controller
+        ports:
+        - containerPort: 8080
+          name: metrics
+          protocol: TCP
+        readinessProbe:
+          failureThreshold: 1
+          httpGet:
+            path: /healthz
+            port: 8080
+            scheme: HTTP
+          initialDelaySeconds: 1
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 3
+        resources:
+          limits:
+            cpu: "50m"
+            memory: 100Mi
+          requests:
+            cpu: "50m"
+            memory: 100Mi
+        securityContext:
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 5000