blob: 5dc131e52b5e09fcc6b2084d15ae58a248fd7d08 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
{{- if .Values.ingress.enabled }}
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
labels:
app: gloo
gloo: ingress-proxy
name: ingress-proxy
namespace: {{ .Release.Namespace }}
spec:
replicas: {{ .Values.ingressProxy.deployment.replicas }}
selector:
matchLabels:
gloo: ingress-proxy
template:
metadata:
labels:
gloo: ingress-proxy
{{- with .Values.ingressProxy.deployment.extraAnnotations }}
annotations:
{{toYaml . | indent 8}}{{- end }}
spec:
containers:
- args: ["--disable-hot-restart"]
env:
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
image: "{{ .Values.ingressProxy.deployment.image.repository }}:{{ .Values.ingressProxy.deployment.image.tag }}"
imagePullPolicy: {{ .Values.ingressProxy.deployment.image.pullPolicy }}
name: ingress-proxy
securityContext:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
add:
- NET_BIND_SERVICE
ports:
- containerPort: {{ .Values.ingressProxy.deployment.httpPort }}
name: http
protocol: TCP
- containerPort: {{ .Values.ingressProxy.deployment.httpsPort }}
name: https
protocol: TCP
{{- with .Values.ingressProxy.deployment.extraPorts }}
{{toYaml . | indent 8}}{{- end }}
volumeMounts:
- mountPath: /etc/envoy
name: envoy-config
{{- if .Values.ingressProxy.deployment.image.pullSecret }}
imagePullSecrets:
- name: {{ .Values.ingressProxy.deployment.image.pullSecret }}{{end}}
volumes:
- configMap:
name: ingress-envoy-config
name: envoy-config
{{- end }}
|
