mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 22:13:18 +09:00
82 lines
1.8 KiB
YAML
82 lines
1.8 KiB
YAML
{{- if not .Values.cozystackOperator.enabled }}
|
|
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: cozy-system
|
|
labels:
|
|
cozystack.io/system: "true"
|
|
pod-security.kubernetes.io/enforce: privileged
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: cozystack
|
|
namespace: cozy-system
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: cozystack
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: cozystack
|
|
namespace: cozy-system
|
|
roleRef:
|
|
kind: ClusterRole
|
|
name: cluster-admin
|
|
apiGroup: rbac.authorization.k8s.io
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: cozystack
|
|
namespace: cozy-system
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: cozystack
|
|
strategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxSurge: 0
|
|
maxUnavailable: 1
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: cozystack
|
|
spec:
|
|
hostNetwork: true
|
|
serviceAccountName: cozystack
|
|
containers:
|
|
- name: cozystack
|
|
image: "{{ .Values.cozystack.image }}"
|
|
env:
|
|
- name: KUBERNETES_SERVICE_HOST
|
|
value: localhost
|
|
- name: INSTALL_FLUX
|
|
value: "true"
|
|
- name: KUBERNETES_SERVICE_PORT
|
|
value: "7445"
|
|
- name: K8S_AWAIT_ELECTION_ENABLED
|
|
value: "1"
|
|
- name: K8S_AWAIT_ELECTION_NAME
|
|
value: cozystack
|
|
- name: K8S_AWAIT_ELECTION_LOCK_NAME
|
|
value: cozystack
|
|
- name: K8S_AWAIT_ELECTION_LOCK_NAMESPACE
|
|
value: cozy-system
|
|
- name: K8S_AWAIT_ELECTION_IDENTITY
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.name
|
|
tolerations:
|
|
- key: "node.kubernetes.io/not-ready"
|
|
operator: "Exists"
|
|
effect: "NoSchedule"
|
|
- key: "node.cilium.io/agent-not-ready"
|
|
operator: "Exists"
|
|
effect: "NoSchedule"
|
|
{{- end }}
|