blob: fb7874eb8cb108127b12e2d253599c4dd3cd13d7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
{{- if .Values.settings.integrations.knative.enabled }}
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
labels:
app: gloo
gloo: clusteringress-proxy
name: clusteringress-proxy
namespace: {{ .Release.Namespace }}
spec:
replicas: {{ .Values.settings.integrations.knative.proxy.replicas }}
selector:
matchLabels:
gloo: clusteringress-proxy
template:
metadata:
labels:
gloo: clusteringress-proxy
spec:
containers:
- args: ["--disable-hot-restart"]
env:
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
image: {{ .Values.settings.integrations.knative.proxy.image.repository }}:{{ .Values.settings.integrations.knative.proxy.image.tag }}
imagePullPolicy: {{ .Values.settings.integrations.knative.proxy.image.pullPolicy }}
name: clusteringress-proxy
securityContext:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
add:
- NET_BIND_SERVICE
ports:
- containerPort: {{ .Values.settings.integrations.knative.proxy.httpPort }}
name: http
protocol: TCP
- containerPort: {{ .Values.settings.integrations.knative.proxy.httpsPort }}
name: https
protocol: TCP
volumeMounts:
- mountPath: /etc/envoy
name: envoy-config
volumes:
- configMap:
name: clusteringress-envoy-config
name: envoy-config
{{- end }}
|
