github.com/m3db/m3@v1.5.1-0.20231129193456-75a402aa583b/scripts/vagrant/provision/manifests/kube-prometheus/kube-state-metrics-deployment.yaml (about)

     1  apiVersion: apps/v1
     2  kind: Deployment
     3  metadata:
     4    labels:
     5      app: kube-state-metrics
     6    name: kube-state-metrics
     7    namespace: monitoring
     8  spec:
     9    replicas: 1
    10    selector:
    11      matchLabels:
    12        app: kube-state-metrics
    13    template:
    14      metadata:
    15        labels:
    16          app: kube-state-metrics
    17      spec:
    18        containers:
    19        - args:
    20          - --logtostderr
    21          - --secure-listen-address=:8443
    22          - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
    23          - --upstream=http://127.0.0.1:8081/
    24          image: quay.io/coreos/kube-rbac-proxy:v0.4.1
    25          name: kube-rbac-proxy-main
    26          ports:
    27          - containerPort: 8443
    28            name: https-main
    29          resources:
    30            limits:
    31              cpu: 20m
    32              memory: 40Mi
    33            requests:
    34              cpu: 10m
    35              memory: 20Mi
    36        - args:
    37          - --logtostderr
    38          - --secure-listen-address=:9443
    39          - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
    40          - --upstream=http://127.0.0.1:8082/
    41          image: quay.io/coreos/kube-rbac-proxy:v0.4.1
    42          name: kube-rbac-proxy-self
    43          ports:
    44          - containerPort: 9443
    45            name: https-self
    46          resources:
    47            limits:
    48              cpu: 20m
    49              memory: 40Mi
    50            requests:
    51              cpu: 10m
    52              memory: 20Mi
    53        - args:
    54          - --host=127.0.0.1
    55          - --port=8081
    56          - --telemetry-host=127.0.0.1
    57          - --telemetry-port=8082
    58          image: quay.io/coreos/kube-state-metrics:v1.5.0
    59          name: kube-state-metrics
    60          resources:
    61            limits:
    62              cpu: 100m
    63              memory: 150Mi
    64            requests:
    65              cpu: 100m
    66              memory: 150Mi
    67        - command:
    68          - /pod_nanny
    69          - --container=kube-state-metrics
    70          - --cpu=100m
    71          - --extra-cpu=2m
    72          - --memory=150Mi
    73          - --extra-memory=30Mi
    74          - --threshold=5
    75          - --deployment=kube-state-metrics
    76          env:
    77          - name: MY_POD_NAME
    78            valueFrom:
    79              fieldRef:
    80                apiVersion: v1
    81                fieldPath: metadata.name
    82          - name: MY_POD_NAMESPACE
    83            valueFrom:
    84              fieldRef:
    85                apiVersion: v1
    86                fieldPath: metadata.namespace
    87          image: k8s.gcr.io/addon-resizer:1.8.4
    88          name: addon-resizer
    89          resources:
    90            limits:
    91              cpu: 50m
    92              memory: 30Mi
    93            requests:
    94              cpu: 10m
    95              memory: 30Mi
    96        nodeSelector:
    97          beta.kubernetes.io/os: linux
    98        securityContext:
    99          runAsNonRoot: true
   100          runAsUser: 65534
   101        serviceAccountName: kube-state-metrics