github.com/k8snetworkplumbingwg/sriov-network-operator@v1.2.1-0.20240408194816-2d2e5a45d453/deployment/sriov-network-operator/templates/operator.yaml (about)

     1  apiVersion: apps/v1
     2  kind: Deployment
     3  metadata:
     4    name: {{ include "sriov-network-operator.fullname" . }}
     5    labels:
     6    {{- include "sriov-network-operator.labels" . | nindent 4 }}
     7  spec:
     8    replicas: 1
     9    selector:
    10      matchLabels:
    11        name: sriov-network-operator
    12    strategy:
    13      type: RollingUpdate
    14      rollingUpdate:
    15        maxUnavailable: 33%
    16    template:
    17      metadata:
    18        labels:
    19          name: sriov-network-operator
    20      spec:
    21        {{- with .Values.operator.nodeSelector }}
    22        nodeSelector:
    23        {{- toYaml . | nindent 8 }}
    24        {{- end }}
    25        {{- with .Values.operator.affinity }}
    26        affinity:
    27          {{- toYaml . | nindent 8}}
    28        {{- end }}
    29        {{- with .Values.operator.tolerations }}
    30        tolerations:
    31        {{- toYaml . | nindent 8 }}
    32        {{- end }}
    33        serviceAccountName: {{ include "sriov-network-operator.fullname" . }}
    34        priorityClassName: "system-node-critical"
    35        {{- if .Values.imagePullSecrets }}
    36        imagePullSecrets:
    37        {{- range .Values.imagePullSecrets }}
    38        - name: {{ . }}
    39        {{- end }}
    40        {{- end }}
    41        containers:
    42          - name: {{ include "sriov-network-operator.fullname" . }}
    43            image: {{ .Values.images.operator }}
    44            command:
    45              - sriov-network-operator
    46            resources:
    47              requests:
    48                cpu: 100m
    49                memory: 100Mi
    50            env:
    51              - name: WATCH_NAMESPACE
    52                valueFrom:
    53                  fieldRef:
    54                    fieldPath: metadata.namespace
    55              - name: SRIOV_CNI_IMAGE
    56                value: {{ .Values.images.sriovCni }}
    57              - name: SRIOV_INFINIBAND_CNI_IMAGE
    58                value: {{ .Values.images.ibSriovCni }}
    59              - name: OVS_CNI_IMAGE
    60                value: {{ .Values.images.ovsCni }}
    61              - name: SRIOV_DEVICE_PLUGIN_IMAGE
    62                value: {{ .Values.images.sriovDevicePlugin }}
    63              - name: NETWORK_RESOURCES_INJECTOR_IMAGE
    64                value: {{ .Values.images.resourcesInjector }}
    65              - name: OPERATOR_NAME
    66                value: sriov-network-operator
    67              - name: SRIOV_NETWORK_CONFIG_DAEMON_IMAGE
    68                value: {{ .Values.images.sriovConfigDaemon }}
    69              - name: SRIOV_NETWORK_WEBHOOK_IMAGE
    70                value: {{ .Values.images.webhook }}
    71              - name: RESOURCE_PREFIX
    72                value: {{ .Values.operator.resourcePrefix }}
    73              - name: IMAGE_PULL_SECRETS
    74                value: {{ join "," .Values.imagePullSecrets }}
    75              - name: NAMESPACE
    76                valueFrom:
    77                  fieldRef:
    78                    fieldPath: metadata.namespace
    79              - name: POD_NAME
    80                valueFrom:
    81                  fieldRef:
    82                    fieldPath: metadata.name
    83              - name: NODE_NAME
    84                valueFrom:
    85                  fieldRef:
    86                    fieldPath: spec.nodeName
    87              - name: RELEASE_VERSION
    88                value: {{ .Release.AppVersion }}
    89              - name: SRIOV_CNI_BIN_PATH
    90                value: {{ .Values.operator.cniBinPath }}
    91              - name: CLUSTER_TYPE
    92                value: {{ .Values.operator.clusterType }}
    93          {{- if .Values.operator.admissionControllers.enabled }}
    94              - name: ADMISSION_CONTROLLERS_CERTIFICATES_OPERATOR_SECRET_NAME
    95                value: {{ .Values.operator.admissionControllers.certificates.secretNames.operator }}
    96              - name: ADMISSION_CONTROLLERS_CERTIFICATES_INJECTOR_SECRET_NAME
    97                value: {{ .Values.operator.admissionControllers.certificates.secretNames.injector }}
    98          {{- if .Values.operator.admissionControllers.certificates.certManager.enabled }}
    99              - name: ADMISSION_CONTROLLERS_CERTIFICATES_CERT_MANAGER_ENABLED
   100                value: {{ .Values.operator.admissionControllers.certificates.certManager.enabled | quote }}
   101          {{- else }}
   102              - name: ADMISSION_CONTROLLERS_CERTIFICATES_OPERATOR_CA_CRT
   103                valueFrom:
   104                  secretKeyRef:
   105                    name: {{ .Values.operator.admissionControllers.certificates.secretNames.operator }}
   106                    key: ca.crt
   107              - name: ADMISSION_CONTROLLERS_CERTIFICATES_INJECTOR_CA_CRT
   108                valueFrom:
   109                  secretKeyRef:
   110                    name: {{ .Values.operator.admissionControllers.certificates.secretNames.injector }}
   111                    key: ca.crt
   112          {{- end }}
   113          {{- end }}