blob: 15be4b2fca478b06b9ca64e829c864dda37e12d2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
# A headless service to create DNS records.
apiVersion: v1
kind: Service
metadata:
name: {{ template "hdfs-k8s.krb5.fullname" . }}
labels:
app: {{ template "hdfs-k8s.krb5.name" . }}
chart: {{ template "hdfs-k8s.subchart" . }}
release: {{ .Release.Name }}
annotations:
# TODO: Deprecated. Replace tolerate-unready-endpoints with
# v1.Service.PublishNotReadyAddresses.
service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
spec:
ports:
- port: {{ .Values.service.port }}
protocol: TCP
name: kdc-tcp
- port: {{ .Values.service.port }}
protocol: UDP
name: kdc-udp
clusterIP: None
selector:
app: {{ template "hdfs-k8s.krb5.name" . }}
release: {{ .Release.Name }}
---
apiVersion: apps/v1beta1
kind: StatefulSet
metadata:
name: {{ template "hdfs-k8s.krb5.fullname" . }}
labels:
app: {{ template "hdfs-k8s.krb5.name" . }}
chart: {{ template "hdfs-k8s.subchart" . }}
release: {{ .Release.Name }}
spec:
serviceName: {{ template "hdfs-k8s.krb5.fullname" . }}
replicas: {{ .Values.replicaCount }}
selector:
matchLabels:
app: {{ template "hdfs-k8s.krb5.name" . }}
release: {{ .Release.Name }}
template:
metadata:
labels:
app: {{ template "hdfs-k8s.krb5.name" . }}
release: {{ .Release.Name }}
{{- if .Values.podAnnotations }}
annotations:
{{ toYaml .Values.podAnnotations | indent 8 }}
{{- end }}
spec:
containers:
- name: {{ .Chart.Name }}
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
imagePullPolicy: {{ .Values.image.pullPolicy }}
env:
- name: KRB5_REALM
value: {{ .Values.global.kerberosRealm }}
- name: KRB5_KDC
value: {{ template "krb5-svc-0" . }}
ports:
- name: kdc-tcp
containerPort: 88
protocol: TCP
- name: kdc-udp
containerPort: 88
protocol: UDP
livenessProbe:
tcpSocket:
port: kdc-tcp
readinessProbe:
tcpSocket:
port: kdc-tcp
restartPolicy: Always
{{- if .Values.global.podSecurityContext.enabled }}
securityContext:
runAsUser: {{ .Values.global.podSecurityContext.runAsUser }}
fsGroup: {{ .Values.global.podSecurityContext.fsGroup }}
{{- end }}
volumeClaimTemplates:
- metadata:
name: datadir
spec:
accessModes:
- {{ .Values.persistence.accessMode | quote }}
resources:
requests:
storage: {{ .Values.persistence.size | quote }}
{{- if .Values.persistence.storageClass }}
{{- if (eq "-" .Values.persistence.storageClass) }}
storageClassName: ""
{{- else }}
storageClassName: "{{ .Values.persistence.storageClass }}"
{{- end }}
{{- end }}
{{- if .Values.persistence.selector }}
selector:
{{ toYaml .Values.persistence.selector | indent 10 }}
{{- end }}
|
