github.com/Racer159/jackal@v0.32.7-0.20240401174413-0bd2339e4f2e/packages/jackal-agent/manifests/deployment.yaml (about)

     1  apiVersion: apps/v1
     2  kind: Deployment
     3  metadata:
     4    name: agent-hook
     5    namespace: jackal
     6    labels:
     7      app: agent-hook
     8  spec:
     9    replicas: 2
    10    selector:
    11      matchLabels:
    12        app: agent-hook
    13    template:
    14      metadata:
    15        labels:
    16          app: agent-hook
    17          # Don't mutate this pod, that would be sad times
    18          jackal.dev/agent: ignore
    19      spec:
    20        imagePullSecrets:
    21          - name: private-registry
    22        priorityClassName: system-node-critical
    23        containers:
    24          - name: server
    25            image: "###JACKAL_REGISTRY###/###JACKAL_CONST_AGENT_IMAGE###:###JACKAL_CONST_AGENT_IMAGE_TAG###"
    26            imagePullPolicy: IfNotPresent
    27            livenessProbe:
    28              httpGet:
    29                path: /healthz
    30                port: 8443
    31                scheme: HTTPS
    32            ports:
    33              - containerPort: 8443
    34            resources:
    35              requests:
    36                memory: "32Mi"
    37                cpu: "100m"
    38              limits:
    39                memory: "128Mi"
    40                cpu: "500m"
    41            volumeMounts:
    42              - name: tls-certs
    43                mountPath: /etc/certs
    44                readOnly: true
    45              - name: jackal-state
    46                mountPath: /etc/jackal-state
    47                readOnly: true
    48              # Required for OpenShift to mount k9s vendored directories
    49              - name: config
    50                mountPath: /.config
    51              - name: xdg
    52                mountPath: /etc/xdg
    53        volumes:
    54          - name: tls-certs
    55            secret:
    56              secretName: agent-hook-tls
    57          - name: jackal-state
    58            secret:
    59              secretName: jackal-state
    60          # Required for OpenShift to mount k9s vendored directories
    61          - name: config
    62            emptyDir: {}
    63          - name: xdg
    64            emptyDir: {}