starlingx/demo/firewall-host-netdevice/charts/sink-host-netdevice/templates/deployment.yaml

   1 apiVersion: apps/v1
   2 kind: Deployment
   3 metadata:
   4   name: {{ include "sink.fullname" . }}
   5   labels:
   6     release: {{ .Release.Name }}
   7     app: {{ include "sink.name" . }}
   8     chart: {{ .Chart.Name }}
   9 spec:
  10   replicas: {{ .Values.replicaCount }}
  11   selector:
  12     matchLabels:
  13       app: {{ include "sink.name" . }}
  14       release: {{ .Release.Name }}
  15   template:
  16     metadata:
  17       labels:
  18         app: {{ include "sink.name" . }}
  19         release: {{ .Release.Name }}
  20       annotations:
  21         k8s.v1.cni.cncf.io/networks: '[
  22           { "name": "host-device-{{ .Values.global.protectedNetPortVsn }}",
  23             "interface": "veth22" }
  24           ]'
  25     spec:
  26       containers:
  27         - name: {{ .Chart.Name }}
  28           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
  29           imagePullPolicy: {{ .Values.image.pullPolicy }}
  30           tty: true
  31           stdin: true
  32           env:
  33             - name: unprotectedNetCidr
  34               value: "{{.Values.global.unprotectedNetCidr}}"
  35             - name: unprotectedNetGw
  36               value: "{{.Values.global.unprotectedNetGw}}"
  37             - name: protectedNetCidr
  38               value: "{{.Values.global.protectedNetCidr}}"
  39             - name: protectedNetGw
  40               value: "{{.Values.global.protectedNetGw}}"
  41             - name: protectedNetGwIp
  42               value: "{{.Values.global.protectedNetGwIp}}"
  43             - name: dcaeCollectorIp
  44               value: "{{.Values.global.dcaeCollectorIp}}"
  45             - name: dcaeCollectorPort
  46               value: "{{.Values.global.dcaeCollectorPort}}"
  47           command: ["/bin/bash", "/opt/vsn_start.sh"]
  48           securityContext:
  49               privileged: true
  50               capabilities:
  51                   add:
  52                   - CAP_SYS_ADMIN
  53           volumeMounts:
  54             - name: scripts
  55               mountPath: /opt
  56           resources:
  57             requests:
  58               cpu: {{ .Values.resources.cpu }}
  59               memory: {{ .Values.resources.memory }}
  60             limits:
  61               cpu: {{ .Values.resources.cpu }}
  62               memory: {{ .Values.resources.memory }}
  63       volumes:
  64         - name: scripts
  65           configMap:
  66             name: {{ .Chart.Name }}-scripts-configmap
  67       imagePullSecrets:
  68       - name: admin-registry-secret