github.com/replicatedhq/ship@v0.55.0/integration/unfork/grafana/expected/rendered.yaml (about) 1 apiVersion: v1 2 kind: ServiceAccount 3 metadata: 4 labels: 5 app: grafana 6 chart: grafana-1.19.0 7 heritage: Tiller 8 release: grafana 9 name: grafana 10 --- 11 apiVersion: rbac.authorization.k8s.io/v1beta1 12 kind: Role 13 metadata: 14 labels: 15 app: grafana 16 chart: grafana-1.19.0 17 heritage: Tiller 18 release: grafana 19 name: grafana 20 rules: 21 - apiGroups: 22 - extensions 23 resourceNames: 24 - grafana 25 resources: 26 - podsecuritypolicies 27 verbs: 28 - use 29 --- 30 apiVersion: rbac.authorization.k8s.io/v1 31 kind: ClusterRole 32 metadata: 33 labels: 34 app: grafana 35 chart: grafana-1.19.0 36 heritage: Tiller 37 release: grafana 38 name: grafana-clusterrole 39 rules: [] 40 --- 41 apiVersion: rbac.authorization.k8s.io/v1beta1 42 kind: RoleBinding 43 metadata: 44 labels: 45 app: grafana 46 chart: grafana-1.19.0 47 heritage: Tiller 48 release: grafana 49 name: grafana 50 roleRef: 51 apiGroup: rbac.authorization.k8s.io 52 kind: Role 53 name: grafana 54 subjects: 55 - kind: ServiceAccount 56 name: grafana 57 --- 58 apiVersion: rbac.authorization.k8s.io/v1 59 kind: ClusterRoleBinding 60 metadata: 61 labels: 62 app: grafana 63 chart: grafana-1.19.0 64 heritage: Tiller 65 release: grafana 66 name: grafana-clusterrolebinding 67 roleRef: 68 apiGroup: rbac.authorization.k8s.io 69 kind: ClusterRole 70 name: grafana-clusterrole 71 subjects: 72 - kind: ServiceAccount 73 name: grafana 74 namespace: default 75 --- 76 apiVersion: v1 77 data: 78 grafana.ini: | 79 [analytics] 80 check_for_updates = true 81 [grafana_net] 82 url = https://grafana.net 83 [log] 84 mode = console 85 [paths] 86 data = /var/lib/grafana/data 87 logs = /var/log/grafana 88 plugins = /var/lib/grafana/plugins 89 provisioning = /etc/grafana/provisioning 90 kind: ConfigMap 91 metadata: 92 labels: 93 app: grafana 94 chart: grafana-1.19.0 95 heritage: Tiller 96 release: grafana 97 name: grafana 98 --- 99 apiVersion: v1 100 data: 101 admin-password: c3Ryb25ncGFzc3dvcmQ= 102 admin-user: YWRtaW4= 103 ldap-toml: "" 104 kind: Secret 105 metadata: 106 labels: 107 app: grafana 108 chart: grafana-1.19.0 109 heritage: Tiller 110 release: grafana 111 name: grafana 112 type: Opaque 113 --- 114 apiVersion: v1 115 kind: Service 116 metadata: 117 labels: 118 app: grafana 119 chart: grafana-1.19.0 120 heritage: Tiller 121 release: grafana 122 name: grafana 123 spec: 124 ports: 125 - name: service 126 port: 80 127 protocol: TCP 128 targetPort: 3000 129 selector: 130 app: grafana 131 release: grafana 132 type: ClusterIP 133 --- 134 apiVersion: apps/v1beta2 135 kind: Deployment 136 metadata: 137 labels: 138 app: grafana 139 chart: grafana-1.19.0 140 heritage: Tiller 141 release: grafana 142 name: grafana 143 spec: 144 replicas: 1 145 selector: 146 matchLabels: 147 app: grafana 148 release: grafana 149 strategy: 150 type: RollingUpdate 151 template: 152 metadata: 153 labels: 154 app: grafana 155 release: grafana 156 spec: 157 containers: 158 - env: 159 - name: NEEDED_TO_FORK 160 value: had to fork 161 - name: GF_SECURITY_ADMIN_USER 162 valueFrom: 163 secretKeyRef: 164 key: admin-user 165 name: grafana 166 - name: GF_SECURITY_ADMIN_PASSWORD 167 valueFrom: 168 secretKeyRef: 169 key: admin-password 170 name: grafana 171 image: grafana/grafana:5.3.4 172 imagePullPolicy: IfNotPresent 173 livenessProbe: 174 failureThreshold: 10 175 httpGet: 176 path: /api/health 177 port: 3000 178 initialDelaySeconds: 60 179 timeoutSeconds: 30 180 name: grafana 181 ports: 182 - containerPort: 80 183 name: service 184 protocol: TCP 185 - containerPort: 3000 186 name: grafana 187 protocol: TCP 188 readinessProbe: 189 httpGet: 190 path: /api/health 191 port: 3000 192 resources: {} 193 volumeMounts: 194 - mountPath: /etc/grafana/grafana.ini 195 name: config 196 subPath: grafana.ini 197 - mountPath: /etc/grafana/ldap.toml 198 name: ldap 199 subPath: ldap.toml 200 - mountPath: /var/lib/grafana 201 name: storage 202 subPath: null 203 securityContext: 204 fsGroup: 472 205 runAsUser: 472 206 serviceAccountName: grafana 207 volumes: 208 - configMap: 209 name: grafana 210 name: config 211 - name: ldap 212 secret: 213 items: 214 - key: ldap-toml 215 path: ldap.toml 216 secretName: grafana 217 - emptyDir: {} 218 name: storage 219 --- 220 apiVersion: extensions/v1beta1 221 kind: PodSecurityPolicy 222 metadata: 223 annotations: 224 apparmor.security.beta.kubernetes.io/allowedProfileNames: runtime/default 225 apparmor.security.beta.kubernetes.io/defaultProfileName: runtime/default 226 seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default 227 seccomp.security.alpha.kubernetes.io/defaultProfileName: docker/default 228 labels: 229 app: grafana 230 chart: grafana-1.19.0 231 heritage: Tiller 232 release: grafana 233 name: grafana 234 spec: 235 allowPrivilegeEscalation: false 236 fsGroup: 237 rule: RunAsAny 238 hostIPC: false 239 hostNetwork: false 240 hostPID: false 241 privileged: false 242 readOnlyRootFilesystem: false 243 requiredDropCapabilities: 244 - ALL 245 runAsUser: 246 rule: RunAsAny 247 seLinux: 248 rule: RunAsAny 249 supplementalGroups: 250 rule: RunAsAny 251 volumes: 252 - configMap 253 - emptyDir 254 - projected 255 - secret 256 - downwardAPI 257 - persistentVolumeClaim