0ef3a7914c
* Added pod psp in Rancher Local Path Provisioner Added pod security policy (psp) in Rancher Local Path Provisioner. Signed-off-by: André R. de Miranda <andre@miranda.work> * Apply psp for Rancher Local Path Provisioner only when local_path_provisioner_namespace is not kube-system and also reorganized the templates
42 lines
1 KiB
Django/Jinja
42 lines
1 KiB
Django/Jinja
---
|
|
apiVersion: apps/v1beta2
|
|
kind: Deployment
|
|
metadata:
|
|
name: local-path-provisioner
|
|
namespace: {{ local_path_provisioner_namespace }}
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: local-path-provisioner
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: local-path-provisioner
|
|
spec:
|
|
serviceAccountName: local-path-provisioner-service-account
|
|
containers:
|
|
- name: local-path-provisioner
|
|
image: {{ local_path_provisioner_image_repo }}:{{ local_path_provisioner_image_tag }}
|
|
imagePullPolicy: Always
|
|
command:
|
|
- local-path-provisioner
|
|
- start
|
|
- --config
|
|
- /etc/config/config.json
|
|
{% if local_path_provisioner_debug|default(false) %}
|
|
- --debug
|
|
{% endif %}
|
|
volumeMounts:
|
|
- name: config-volume
|
|
mountPath: /etc/config/
|
|
env:
|
|
- name: POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
volumes:
|
|
- name: config-volume
|
|
configMap:
|
|
name: local-path-config
|