blob: bb54e8f3317eeb986fe0e66fcafed1417cd940a5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
{{- if .Values.gateway.enabled }}
{{- range $key, $spec := .Values.gatewayProxies }}
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
labels:
app: gloo
gloo: {{ $key }}
name: {{ $key }}
namespace: {{ $.Release.Namespace }}
spec:
replicas: {{ $spec.deployment.replicas }}
selector:
matchLabels:
gloo: {{ $key }}
template:
metadata:
labels:
gloo: {{ $key }}
{{- with $spec.deployment.extraAnnotations }}
annotations:
{{toYaml . | indent 8}}{{- end }}
spec:
containers:
- args: ["--disable-hot-restart"]
env:
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
image: {{ $spec.deployment.image.repository }}:{{ $spec.deployment.image.tag }}
imagePullPolicy: {{ $spec.deployment.image.pullPolicy }}
name: gateway-proxy
securityContext:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
add:
- NET_BIND_SERVICE
ports:
- containerPort: {{ $spec.deployment.httpPort }}
name: http
protocol: TCP
- containerPort: {{ $spec.deployment.httpsPort }}
name: https
protocol: TCP
{{- with $spec.deployment.extraPorts }}
{{toYaml . | indent 8}}{{- end }}
volumeMounts:
- mountPath: /etc/envoy
name: envoy-config
{{- if $spec.deployment.image.pullSecret }}
imagePullSecrets:
- name: {{ $spec.deployment.image.pullSecret }}{{end}}
volumes:
- configMap:
name: {{ $key }}-envoy-config
name: envoy-config
{{- end }}
{{- end }}
|
