github.com/replicatedcom/ship@v0.50.0/integration/init/multiple-kustomize-bases/expected/nginx-ingress-controller.yaml (about)

     1  apiVersion: v1
     2  kind: Namespace
     3  metadata:
     4    labels:
     5      app.kubernetes.io/name: ingress-nginx
     6      app.kubernetes.io/part-of: ingress-nginx
     7    name: ingress-nginx
     8  ---
     9  apiVersion: v1
    10  kind: ServiceAccount
    11  metadata:
    12    labels:
    13      app.kubernetes.io/name: ingress-nginx
    14      app.kubernetes.io/part-of: ingress-nginx
    15    name: nginx-ingress-serviceaccount
    16    namespace: ingress-nginx
    17  ---
    18  apiVersion: rbac.authorization.k8s.io/v1beta1
    19  kind: Role
    20  metadata:
    21    labels:
    22      app.kubernetes.io/name: ingress-nginx
    23      app.kubernetes.io/part-of: ingress-nginx
    24    name: nginx-ingress-role
    25    namespace: ingress-nginx
    26  rules:
    27  - apiGroups:
    28    - ""
    29    resources:
    30    - configmaps
    31    - pods
    32    - secrets
    33    - namespaces
    34    verbs:
    35    - get
    36  - apiGroups:
    37    - ""
    38    resourceNames:
    39    - ingress-controller-leader-nginx
    40    resources:
    41    - configmaps
    42    verbs:
    43    - get
    44    - update
    45  - apiGroups:
    46    - ""
    47    resources:
    48    - configmaps
    49    verbs:
    50    - create
    51  - apiGroups:
    52    - ""
    53    resources:
    54    - endpoints
    55    verbs:
    56    - get
    57  ---
    58  apiVersion: rbac.authorization.k8s.io/v1beta1
    59  kind: ClusterRole
    60  metadata:
    61    labels:
    62      app.kubernetes.io/name: ingress-nginx
    63      app.kubernetes.io/part-of: ingress-nginx
    64    name: nginx-ingress-clusterrole
    65  rules:
    66  - apiGroups:
    67    - ""
    68    resources:
    69    - configmaps
    70    - endpoints
    71    - nodes
    72    - pods
    73    - secrets
    74    verbs:
    75    - list
    76    - watch
    77  - apiGroups:
    78    - ""
    79    resources:
    80    - nodes
    81    verbs:
    82    - get
    83  - apiGroups:
    84    - ""
    85    resources:
    86    - services
    87    verbs:
    88    - get
    89    - list
    90    - watch
    91  - apiGroups:
    92    - extensions
    93    resources:
    94    - ingresses
    95    verbs:
    96    - get
    97    - list
    98    - watch
    99  - apiGroups:
   100    - ""
   101    resources:
   102    - events
   103    verbs:
   104    - create
   105    - patch
   106  - apiGroups:
   107    - extensions
   108    resources:
   109    - ingresses/status
   110    verbs:
   111    - update
   112  ---
   113  apiVersion: rbac.authorization.k8s.io/v1beta1
   114  kind: RoleBinding
   115  metadata:
   116    labels:
   117      app.kubernetes.io/name: ingress-nginx
   118      app.kubernetes.io/part-of: ingress-nginx
   119    name: nginx-ingress-role-nisa-binding
   120    namespace: ingress-nginx
   121  roleRef:
   122    apiGroup: rbac.authorization.k8s.io
   123    kind: Role
   124    name: nginx-ingress-role
   125  subjects:
   126  - kind: ServiceAccount
   127    name: nginx-ingress-serviceaccount
   128    namespace: ingress-nginx
   129  ---
   130  apiVersion: rbac.authorization.k8s.io/v1beta1
   131  kind: ClusterRoleBinding
   132  metadata:
   133    labels:
   134      app.kubernetes.io/name: ingress-nginx
   135      app.kubernetes.io/part-of: ingress-nginx
   136    name: nginx-ingress-clusterrole-nisa-binding
   137  roleRef:
   138    apiGroup: rbac.authorization.k8s.io
   139    kind: ClusterRole
   140    name: nginx-ingress-clusterrole
   141  subjects:
   142  - kind: ServiceAccount
   143    name: nginx-ingress-serviceaccount
   144    namespace: ingress-nginx
   145  ---
   146  apiVersion: v1
   147  data:
   148    use-proxy-protocol: "true"
   149  kind: ConfigMap
   150  metadata:
   151    labels:
   152      app.kubernetes.io/name: ingress-nginx
   153      app.kubernetes.io/part-of: ingress-nginx
   154    name: nginx-configuration
   155    namespace: ingress-nginx
   156  ---
   157  apiVersion: v1
   158  kind: ConfigMap
   159  metadata:
   160    labels:
   161      app.kubernetes.io/name: ingress-nginx
   162      app.kubernetes.io/part-of: ingress-nginx
   163    name: tcp-services
   164    namespace: ingress-nginx
   165  ---
   166  apiVersion: v1
   167  kind: ConfigMap
   168  metadata:
   169    labels:
   170      app.kubernetes.io/name: ingress-nginx
   171      app.kubernetes.io/part-of: ingress-nginx
   172    name: udp-services
   173    namespace: ingress-nginx
   174  ---
   175  apiVersion: v1
   176  kind: Service
   177  metadata:
   178    annotations:
   179      service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: "60"
   180      service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: '*'
   181    labels:
   182      app.kubernetes.io/name: ingress-nginx
   183      app.kubernetes.io/part-of: ingress-nginx
   184    name: ingress-nginx
   185    namespace: ingress-nginx
   186  spec:
   187    ports:
   188    - name: http
   189      port: 80
   190      targetPort: http
   191    - name: https
   192      port: 443
   193      targetPort: https
   194    selector:
   195      app.kubernetes.io/name: ingress-nginx
   196      app.kubernetes.io/part-of: ingress-nginx
   197    type: LoadBalancer
   198  ---
   199  apiVersion: v1
   200  kind: Service
   201  metadata:
   202    name: placeholder
   203    namespace: placeholder
   204  spec:
   205    ports:
   206    - name: http
   207      port: 80
   208      targetPort: http
   209    - name: https
   210      port: 443
   211      targetPort: https
   212    selector:
   213      app.kubernetes.io/name: placeholder
   214      app.kubernetes.io/part-of: placeholder
   215    type: LoadBalancer
   216  ---
   217  apiVersion: apps/v1
   218  kind: Deployment
   219  metadata:
   220    labels:
   221      app.kubernetes.io/name: ingress-nginx
   222      app.kubernetes.io/part-of: ingress-nginx
   223    name: nginx-ingress-controller
   224    namespace: ingress-nginx
   225  spec:
   226    replicas: 1
   227    selector:
   228      matchLabels:
   229        app.kubernetes.io/name: ingress-nginx
   230        app.kubernetes.io/part-of: ingress-nginx
   231    template:
   232      metadata:
   233        annotations:
   234          prometheus.io/port: "10254"
   235          prometheus.io/scrape: "true"
   236        labels:
   237          app.kubernetes.io/name: ingress-nginx
   238          app.kubernetes.io/part-of: ingress-nginx
   239      spec:
   240        containers:
   241        - args:
   242          - /nginx-ingress-controller
   243          - --configmap=$(POD_NAMESPACE)/nginx-configuration
   244          - --tcp-services-configmap=$(POD_NAMESPACE)/tcp-services
   245          - --udp-services-configmap=$(POD_NAMESPACE)/udp-services
   246          - --publish-service=$(POD_NAMESPACE)/ingress-nginx
   247          - --annotations-prefix=nginx.ingress.kubernetes.io
   248          env:
   249          - name: POD_NAME
   250            valueFrom:
   251              fieldRef:
   252                fieldPath: metadata.name
   253          - name: POD_NAMESPACE
   254            valueFrom:
   255              fieldRef:
   256                fieldPath: metadata.namespace
   257          image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.22.0
   258          livenessProbe:
   259            failureThreshold: 3
   260            httpGet:
   261              path: /healthz
   262              port: 10254
   263              scheme: HTTP
   264            initialDelaySeconds: 10
   265            periodSeconds: 10
   266            successThreshold: 1
   267            timeoutSeconds: 1
   268          name: nginx-ingress-controller
   269          ports:
   270          - containerPort: 80
   271            name: http
   272          - containerPort: 443
   273            name: https
   274          readinessProbe:
   275            failureThreshold: 3
   276            httpGet:
   277              path: /healthz
   278              port: 10254
   279              scheme: HTTP
   280            periodSeconds: 10
   281            successThreshold: 1
   282            timeoutSeconds: 1
   283          securityContext:
   284            allowPrivilegeEscalation: true
   285            capabilities:
   286              add:
   287              - NET_BIND_SERVICE
   288              drop:
   289              - ALL
   290            runAsUser: 33
   291        serviceAccountName: nginx-ingress-serviceaccount