github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/opensearch-operator/templates/opensearch-operator-controller-manager-deployment.yaml (about) 1 apiVersion: apps/v1 2 kind: Deployment 3 metadata: 4 labels: 5 control-plane: controller-manager 6 name: {{ include "opensearch-operator.fullname" . }}-controller-manager 7 spec: 8 replicas: 1 9 selector: 10 matchLabels: 11 control-plane: controller-manager 12 template: 13 metadata: 14 labels: 15 control-plane: controller-manager 16 spec: 17 containers: 18 {{- if or (.Values.kubeRbacProxy.enable) (eq (.Values.kubeRbacProxy.enable | toString) "<nil>") }} 19 - args: 20 - --secure-listen-address=0.0.0.0:8443 21 - --upstream=http://127.0.0.1:8080/ 22 - --logtostderr=true 23 - --v=10 24 image: "{{ .Values.kubeRbacProxy.image.repository }}:{{ .Values.kubeRbacProxy.image.tag}}" 25 name: kube-rbac-proxy 26 resources: 27 {{- toYaml .Values.kubeRbacProxy.resources | nindent 10 }} 28 readinessProbe: 29 {{- toYaml .Values.kubeRbacProxy.readinessProbe | nindent 10 }} 30 livenessProbe: 31 {{- toYaml .Values.kubeRbacProxy.livenessProbe | nindent 10 }} 32 securityContext: 33 {{- toYaml .Values.kubeRbacProxy.securityContext | nindent 10 }} 34 ports: 35 - containerPort: 8443 36 name: https 37 {{- end}} 38 - args: 39 - --health-probe-bind-address=:8081 40 - --metrics-bind-address=127.0.0.1:8080 41 - --leader-elect 42 {{- if .Values.manager.watchNamespace }} 43 - --watch-namespace={{ .Values.manager.watchNamespace }} 44 {{- end }} 45 - --loglevel={{ .Values.manager.loglevel }} 46 command: 47 - /manager 48 image: "{{ .Values.manager.image.repository }}:{{ .Values.manager.image.tag | default .Chart.AppVersion }}" 49 name: operator-controller-manager 50 imagePullPolicy: "{{ .Values.manager.image.pullPolicy }}" 51 resources: 52 {{- toYaml .Values.manager.resources | nindent 10 }} 53 readinessProbe: 54 {{- toYaml .Values.manager.readinessProbe | nindent 10 }} 55 livenessProbe: 56 {{- toYaml .Values.manager.livenessProbe | nindent 10 }} 57 env: 58 - name: DNS_BASE 59 value: {{ .Values.manager.dnsBase }} 60 - name: PARALLEL_RECOVERY_ENABLED 61 value: "{{ .Values.manager.parallelRecoveryEnabled }}" 62 {{- if .Values.manager.extraEnv }} 63 {{- toYaml .Values.manager.extraEnv | nindent 8 }} 64 {{- end }} 65 securityContext: 66 {{- toYaml .Values.manager.securityContext | nindent 10 }} 67 nodeSelector: 68 {{- toYaml .Values.nodeSelector | nindent 8 }} 69 tolerations: 70 {{- toYaml .Values.tolerations | nindent 8 }} 71 securityContext: 72 {{- toYaml .Values.securityContext | nindent 8}} 73 {{- if and .Values.manager.imagePullSecrets (not .Values.serviceAccount.create ) }} 74 imagePullSecrets: 75 {{- range .Values.manager.imagePullSecrets }} 76 - name: {{ . }} 77 {{- end }} 78 {{- end }} 79 serviceAccountName: {{ include "opensearch-operator.serviceAccountName" . }} 80 terminationGracePeriodSeconds: 10