vnfs/DAaaS/00-init/gloo/templates/11-ingress-proxy-deployment.yaml

   1 {{- if .Values.ingress.enabled }}
   2 apiVersion: extensions/v1beta1
   3 kind: Deployment
   4 metadata:
   5   labels:
   6     app: gloo
   7     gloo: ingress-proxy
   8   name: ingress-proxy
   9   namespace: {{ .Release.Namespace }}
  10 spec:
  11   replicas: {{ .Values.ingressProxy.deployment.replicas }}
  12   selector:
  13     matchLabels:
  14       gloo: ingress-proxy
  15   template:
  16     metadata:
  17       labels:
  18         gloo: ingress-proxy
  19 {{- with .Values.ingressProxy.deployment.extraAnnotations }}
  20       annotations:
  21 {{toYaml  . | indent 8}}{{- end }}
  22     spec:
  23       containers:
  24       - args: ["--disable-hot-restart"]
  25         env:
  26         - name: POD_NAMESPACE
  27           valueFrom:
  28             fieldRef:
  29               fieldPath: metadata.namespace
  30         - name: POD_NAME
  31           valueFrom:
  32             fieldRef:
  33               fieldPath: metadata.name
  34         image: "{{ .Values.ingressProxy.deployment.image.repository }}:{{ .Values.ingressProxy.deployment.image.tag }}"
  35         imagePullPolicy: {{ .Values.ingressProxy.deployment.image.pullPolicy }}
  36         name: ingress-proxy
  37         securityContext:
  38           readOnlyRootFilesystem: true
  39           allowPrivilegeEscalation: false
  40           capabilities:
  41             drop:
  42             - ALL
  43             add:
  44             - NET_BIND_SERVICE
  45         ports:
  46         - containerPort: {{ .Values.ingressProxy.deployment.httpPort }}
  47           name: http
  48           protocol: TCP
  49         - containerPort: {{ .Values.ingressProxy.deployment.httpsPort }}
  50           name: https
  51           protocol: TCP
  52 {{- with .Values.ingressProxy.deployment.extraPorts }}
  53 {{toYaml  . | indent 8}}{{- end }}
  54         volumeMounts:
  55         - mountPath: /etc/envoy
  56           name: envoy-config
  57       {{- if .Values.ingressProxy.deployment.image.pullSecret }}
  58       imagePullSecrets:
  59         - name: {{ .Values.ingressProxy.deployment.image.pullSecret }}{{end}}
  60       volumes:
  61       - configMap:
  62           name: ingress-envoy-config
  63         name: envoy-config
  64
  65 {{- end }}