summaryrefslogtreecommitdiffstats
path: root/vnfs/DAaaS/00-init/gloo/templates/7-gateway-proxy-deployment.yaml
blob: bb54e8f3317eeb986fe0e66fcafed1417cd940a5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
{{- if .Values.gateway.enabled }}
{{- range $key, $spec := .Values.gatewayProxies }}
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  labels:
    app: gloo
    gloo: {{ $key }}
  name: {{ $key }}
  namespace: {{ $.Release.Namespace }}
spec:
  replicas: {{ $spec.deployment.replicas }}
  selector:
    matchLabels:
      gloo: {{ $key }}
  template:
    metadata:
      labels:
        gloo: {{ $key }}
{{- with $spec.deployment.extraAnnotations }}
      annotations:
{{toYaml  . | indent 8}}{{- end }}
    spec:
      containers:
      - args: ["--disable-hot-restart"]
        env:
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        image: {{ $spec.deployment.image.repository }}:{{ $spec.deployment.image.tag }}
        imagePullPolicy: {{ $spec.deployment.image.pullPolicy }}
        name: gateway-proxy
        securityContext:
          readOnlyRootFilesystem: true
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
            add:
            - NET_BIND_SERVICE
        ports:
        - containerPort: {{ $spec.deployment.httpPort }}
          name: http
          protocol: TCP
        - containerPort: {{ $spec.deployment.httpsPort }}
          name: https
          protocol: TCP
{{- with $spec.deployment.extraPorts }}
{{toYaml  . | indent 8}}{{- end }}
        volumeMounts:
        - mountPath: /etc/envoy
          name: envoy-config
      {{- if $spec.deployment.image.pullSecret }}
      imagePullSecrets:
        - name: {{ $spec.deployment.image.pullSecret }}{{end}}
      volumes:
      - configMap:
          name: {{ $key }}-envoy-config
        name: envoy-config
{{- end }}
{{- end }}