github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/cert-manager/templates/cainjector-deployment.yaml (about) 1 {{- if .Values.cainjector.enabled }} 2 apiVersion: apps/v1 3 kind: Deployment 4 metadata: 5 name: {{ include "cainjector.fullname" . }} 6 namespace: {{ include "cert-manager.namespace" . }} 7 labels: 8 app: {{ include "cainjector.name" . }} 9 app.kubernetes.io/name: {{ include "cainjector.name" . }} 10 app.kubernetes.io/instance: {{ .Release.Name }} 11 app.kubernetes.io/component: "cainjector" 12 {{- include "labels" . | nindent 4 }} 13 {{- with .Values.cainjector.deploymentAnnotations }} 14 annotations: 15 {{- toYaml . | nindent 4 }} 16 {{- end }} 17 spec: 18 replicas: {{ .Values.cainjector.replicaCount }} 19 selector: 20 matchLabels: 21 app.kubernetes.io/name: {{ include "cainjector.name" . }} 22 app.kubernetes.io/instance: {{ .Release.Name }} 23 app.kubernetes.io/component: "cainjector" 24 {{- with .Values.cainjector.strategy }} 25 strategy: 26 {{- toYaml . | nindent 4 }} 27 {{- end }} 28 template: 29 metadata: 30 labels: 31 app: {{ include "cainjector.name" . }} 32 app.kubernetes.io/name: {{ include "cainjector.name" . }} 33 app.kubernetes.io/instance: {{ .Release.Name }} 34 app.kubernetes.io/component: "cainjector" 35 {{- include "labels" . | nindent 8 }} 36 {{- with .Values.cainjector.podLabels }} 37 {{- toYaml . | nindent 8 }} 38 {{- end }} 39 {{- with .Values.cainjector.podAnnotations }} 40 annotations: 41 {{- toYaml . | nindent 8 }} 42 {{- end }} 43 spec: 44 serviceAccountName: {{ template "cainjector.serviceAccountName" . }} 45 {{- if hasKey .Values.cainjector "automountServiceAccountToken" }} 46 automountServiceAccountToken: {{ .Values.cainjector.automountServiceAccountToken }} 47 {{- end }} 48 {{- with .Values.global.priorityClassName }} 49 priorityClassName: {{ . | quote }} 50 {{- end }} 51 {{- with .Values.cainjector.securityContext }} 52 securityContext: 53 {{- toYaml . | nindent 8 }} 54 {{- end }} 55 containers: 56 - name: {{ .Chart.Name }} 57 {{- with .Values.cainjector.image }} 58 image: "{{- if .registry -}}{{ .registry }}/{{- end -}}{{ .repository }}{{- if (.digest) -}} @{{ .digest }}{{- else -}}:{{ default $.Chart.AppVersion .tag }} {{- end -}}" 59 {{- end }} 60 imagePullPolicy: {{ .Values.cainjector.image.pullPolicy }} 61 args: 62 {{- if .Values.global.logLevel }} 63 - --v={{ .Values.global.logLevel }} 64 {{- end }} 65 {{- with .Values.global.leaderElection }} 66 - --leader-election-namespace={{ .namespace }} 67 {{- if .leaseDuration }} 68 - --leader-election-lease-duration={{ .leaseDuration }} 69 {{- end }} 70 {{- if .renewDeadline }} 71 - --leader-election-renew-deadline={{ .renewDeadline }} 72 {{- end }} 73 {{- if .retryPeriod }} 74 - --leader-election-retry-period={{ .retryPeriod }} 75 {{- end }} 76 {{- end }} 77 {{- with .Values.cainjector.extraArgs }} 78 {{- toYaml . | nindent 10 }} 79 {{- end }} 80 env: 81 - name: POD_NAMESPACE 82 valueFrom: 83 fieldRef: 84 fieldPath: metadata.namespace 85 {{- with .Values.cainjector.containerSecurityContext }} 86 securityContext: 87 {{- toYaml . | nindent 12 }} 88 {{- end }} 89 {{- with .Values.cainjector.resources }} 90 resources: 91 {{- toYaml . | nindent 12 }} 92 {{- end }} 93 {{- with .Values.cainjector.nodeSelector }} 94 nodeSelector: 95 {{- toYaml . | nindent 8 }} 96 {{- end }} 97 {{- with .Values.cainjector.affinity }} 98 affinity: 99 {{- toYaml . | nindent 8 }} 100 {{- end }} 101 {{- with .Values.cainjector.tolerations }} 102 tolerations: 103 {{- toYaml . | nindent 8 }} 104 {{- end }} 105 {{- end }}