github.com/argoproj/argo-cd/v3@v3.2.1/manifests/base/dex/argocd-dex-server-deployment.yaml (about)

     1  apiVersion: apps/v1
     2  kind: Deployment
     3  metadata:
     4    labels:
     5      app.kubernetes.io/name: argocd-dex-server
     6      app.kubernetes.io/part-of: argocd
     7      app.kubernetes.io/component: dex-server
     8    name: argocd-dex-server
     9  spec:
    10    selector:
    11      matchLabels:
    12        app.kubernetes.io/name: argocd-dex-server
    13    template:
    14      metadata:
    15        labels:
    16          app.kubernetes.io/name: argocd-dex-server
    17      spec:
    18        serviceAccountName: argocd-dex-server
    19        initContainers:
    20        - name: copyutil
    21          image: quay.io/argoproj/argocd:latest
    22          imagePullPolicy: Always
    23          command: [/bin/cp, -n, /usr/local/bin/argocd, /shared/argocd-dex]
    24          volumeMounts:
    25          - mountPath: /shared
    26            name: static-files
    27          - mountPath: /tmp
    28            name: dexconfig
    29          securityContext:
    30            capabilities:
    31              drop:
    32              - ALL
    33            allowPrivilegeEscalation: false
    34            readOnlyRootFilesystem: true
    35            runAsNonRoot: true
    36            seccompProfile:
    37              type: RuntimeDefault
    38        containers:
    39        - name: dex
    40          image: ghcr.io/dexidp/dex:v2.43.0
    41          imagePullPolicy: Always
    42          command: [/shared/argocd-dex, rundex]
    43          env:
    44            - name: ARGOCD_DEX_SERVER_LOGFORMAT
    45              valueFrom:
    46                configMapKeyRef:
    47                  key: dexserver.log.format
    48                  name: argocd-cmd-params-cm
    49                  optional: true
    50            - name: ARGOCD_DEX_SERVER_LOGLEVEL
    51              valueFrom:
    52                configMapKeyRef:
    53                  key: dexserver.log.level
    54                  name: argocd-cmd-params-cm
    55                  optional: true
    56            - name: ARGOCD_LOG_FORMAT_TIMESTAMP
    57              valueFrom:
    58                configMapKeyRef:
    59                  name: argocd-cmd-params-cm
    60                  key: log.format.timestamp
    61                  optional: true
    62            - name: ARGOCD_DEX_SERVER_DISABLE_TLS
    63              valueFrom:
    64                configMapKeyRef:
    65                  name: argocd-cmd-params-cm
    66                  key: dexserver.disable.tls
    67                  optional: true
    68          securityContext:
    69            capabilities:
    70              drop:
    71              - ALL
    72            allowPrivilegeEscalation: false
    73            readOnlyRootFilesystem: true
    74            runAsNonRoot: true
    75            seccompProfile:
    76              type: RuntimeDefault
    77          ports:
    78          - containerPort: 5556
    79          - containerPort: 5557
    80          - containerPort: 5558
    81          volumeMounts:
    82          - mountPath: /shared
    83            name: static-files
    84          - mountPath: /tmp
    85            name: dexconfig
    86          - mountPath: /tls
    87            name: argocd-dex-server-tls
    88        volumes:
    89        - emptyDir: {}
    90          name: static-files
    91        - emptyDir: {}
    92          name: dexconfig
    93        - name: argocd-dex-server-tls
    94          secret:
    95            secretName: argocd-dex-server-tls
    96            optional: true
    97            items:
    98            - key: tls.crt
    99              path: tls.crt
   100            - key: tls.key
   101              path: tls.key
   102            - key: ca.crt
   103              path: ca.crt
   104        affinity:
   105          podAntiAffinity:
   106            preferredDuringSchedulingIgnoredDuringExecution:
   107            - weight: 5
   108              podAffinityTerm:
   109                labelSelector:
   110                  matchLabels:
   111                    app.kubernetes.io/part-of: argocd
   112                topologyKey: kubernetes.io/hostname
   113        nodeSelector:
   114          kubernetes.io/os: linux