|
| 1 |
apiVersion: apps/v1 |
1 |
apiVersion: apps/v1 |
| 2 |
kind: Deployment |
2 |
kind: Deployment |
| 3 |
metadata: |
3 |
metadata: |
| 4 |
labels: |
4 |
labels: |
| 5 |
app.kubernetes.io/instance: cloudnative-pg |
5 |
app.kubernetes.io/instance: cloudnative-pg |
| 6 |
app.kubernetes.io/managed-by: Helm |
6 |
app.kubernetes.io/managed-by: Helm |
| 7 |
app.kubernetes.io/name: cloudnative-pg |
7 |
app.kubernetes.io/name: cloudnative-pg |
| 8 |
helm.toolkit.fluxcd.io/name: cloudnative-pg |
8 |
helm.toolkit.fluxcd.io/name: cloudnative-pg |
| 9 |
helm.toolkit.fluxcd.io/namespace: databases |
9 |
helm.toolkit.fluxcd.io/namespace: databases |
| 10 |
name: cloudnative-pg |
10 |
name: cloudnative-pg |
| 11 |
namespace: databases |
11 |
namespace: databases |
| 12 |
spec: |
12 |
spec: |
| 13 |
replicas: 1 |
13 |
replicas: 1 |
| 14 |
selector: |
14 |
selector: |
| 15 |
matchLabels: |
15 |
matchLabels: |
| 16 |
app.kubernetes.io/instance: cloudnative-pg |
16 |
app.kubernetes.io/instance: cloudnative-pg |
| 17 |
app.kubernetes.io/name: cloudnative-pg |
17 |
app.kubernetes.io/name: cloudnative-pg |
| 18 |
template: |
18 |
template: |
| 19 |
metadata: |
19 |
metadata: |
| 20 |
annotations: |
20 |
annotations: |
| 21 |
checksum/monitoring-config: 0704a3f6bf6516fd8f5c22203212237d4bece44c15978264e68eabbddc1af86e |
21 |
checksum/monitoring-config: f55e1883a2baa37570f9a24403a636dff7f05daed118dcb790aa3e176259b218 |
| 22 |
checksum/rbac: 1ba72b8a3ec47b24f4e6d930f66f67d705567100e74fdaebadeecf15fa5c9ef7 |
22 |
checksum/rbac: 46c2bfd4b387229349f76093629d56a1457adc4e859f42039461b854b345feb8 |
| 23 |
labels: |
23 |
labels: |
| 24 |
app.kubernetes.io/instance: cloudnative-pg |
24 |
app.kubernetes.io/instance: cloudnative-pg |
| 25 |
app.kubernetes.io/name: cloudnative-pg |
25 |
app.kubernetes.io/name: cloudnative-pg |
|
| 26 |
spec: |
26 |
spec: |
| 27 |
containers: |
27 |
containers: |
| 28 |
- args: |
28 |
- args: |
| 29 |
- controller |
29 |
- controller |
| 30 |
- --leader-elect |
30 |
- --leader-elect |
| 31 |
- --max-concurrent-reconciles=10 |
31 |
- --max-concurrent-reconciles=10 |
| 32 |
- --config-map-name=cnpg-controller-manager-config |
32 |
- --config-map-name=cnpg-controller-manager-config |
| 33 |
- --webhook-port=9443 |
33 |
- --webhook-port=9443 |
| 34 |
command: |
34 |
command: |
| 35 |
- /manager |
35 |
- /manager |
| 36 |
env: |
36 |
env: |
| 37 |
- name: OPERATOR_IMAGE_NAME |
37 |
- name: OPERATOR_IMAGE_NAME |
| 38 |
value: ghcr.io/cloudnative-pg/cloudnative-pg:1.29.1 |
38 |
value: ghcr.io/cloudnative-pg/cloudnative-pg:1.29.1 |
| 39 |
- name: OPERATOR_NAMESPACE |
39 |
- name: OPERATOR_NAMESPACE |
| 40 |
valueFrom: |
40 |
valueFrom: |
| 41 |
fieldRef: |
41 |
fieldRef: |
| 42 |
fieldPath: metadata.namespace |
42 |
fieldPath: metadata.namespace |
| 43 |
- name: MONITORING_QUERIES_CONFIGMAP |
43 |
- name: MONITORING_QUERIES_CONFIGMAP |
| 44 |
value: cnpg-default-monitoring |
44 |
value: cnpg-default-monitoring |
| 45 |
image: ghcr.io/cloudnative-pg/cloudnative-pg:1.29.1 |
45 |
image: ghcr.io/cloudnative-pg/cloudnative-pg:1.29.1 |
| 46 |
imagePullPolicy: IfNotPresent |
46 |
imagePullPolicy: IfNotPresent |
| 47 |
livenessProbe: |
47 |
livenessProbe: |
| 48 |
httpGet: |
48 |
httpGet: |
| 49 |
path: /readyz |
49 |
path: /readyz |
| 50 |
port: webhook-server |
50 |
port: webhook-server |
| 51 |
scheme: HTTPS |
51 |
scheme: HTTPS |
| 52 |
initialDelaySeconds: 3 |
52 |
initialDelaySeconds: 3 |
| 53 |
name: manager |
53 |
name: manager |
| 54 |
ports: |
54 |
ports: |
| 55 |
- containerPort: 8080 |
55 |
- containerPort: 8080 |
| 56 |
name: metrics |
56 |
name: metrics |
| 57 |
protocol: TCP |
57 |
protocol: TCP |
| 58 |
- containerPort: 9443 |
58 |
- containerPort: 9443 |
| 59 |
name: webhook-server |
59 |
name: webhook-server |
| 60 |
protocol: TCP |
60 |
protocol: TCP |
| 61 |
readinessProbe: |
61 |
readinessProbe: |
| 62 |
httpGet: |
62 |
httpGet: |
| 63 |
path: /readyz |
63 |
path: /readyz |
| 64 |
port: webhook-server |
64 |
port: webhook-server |
| 65 |
scheme: HTTPS |
65 |
scheme: HTTPS |
| 66 |
initialDelaySeconds: 3 |
66 |
initialDelaySeconds: 3 |
| 67 |
resources: {} |
67 |
resources: {} |
| 68 |
securityContext: |
68 |
securityContext: |
| 69 |
allowPrivilegeEscalation: false |
69 |
allowPrivilegeEscalation: false |
| 70 |
capabilities: |
70 |
capabilities: |
| 71 |
drop: |
71 |
drop: |
| 72 |
- ALL |
72 |
- ALL |
| 73 |
readOnlyRootFilesystem: true |
73 |
readOnlyRootFilesystem: true |
| 74 |
runAsGroup: 10001 |
74 |
runAsGroup: 10001 |
| 75 |
runAsUser: 10001 |
75 |
runAsUser: 10001 |
| 76 |
seccompProfile: |
76 |
seccompProfile: |
| 77 |
type: RuntimeDefault |
77 |
type: RuntimeDefault |
| 78 |
startupProbe: |
78 |
startupProbe: |
| 79 |
failureThreshold: 6 |
79 |
failureThreshold: 6 |
| 80 |
httpGet: |
80 |
httpGet: |
| 81 |
path: /readyz |
81 |
path: /readyz |
| 82 |
port: webhook-server |
82 |
port: webhook-server |
| 83 |
scheme: HTTPS |
83 |
scheme: HTTPS |
| 84 |
periodSeconds: 5 |
84 |
periodSeconds: 5 |
| 85 |
volumeMounts: |
85 |
volumeMounts: |
| 86 |
- mountPath: /controller |
86 |
- mountPath: /controller |
| 87 |
name: scratch-data |
87 |
name: scratch-data |
| 88 |
- mountPath: /run/secrets/cnpg.io/webhook |
88 |
- mountPath: /run/secrets/cnpg.io/webhook |
| 89 |
name: webhook-certificates |
89 |
name: webhook-certificates |
| 90 |
securityContext: |
90 |
securityContext: |
| 91 |
runAsNonRoot: true |
91 |
runAsNonRoot: true |
| 92 |
seccompProfile: |
92 |
seccompProfile: |
| 93 |
type: RuntimeDefault |
93 |
type: RuntimeDefault |
| 94 |
serviceAccountName: cloudnative-pg |
94 |
serviceAccountName: cloudnative-pg |
| 95 |
terminationGracePeriodSeconds: 10 |
95 |
terminationGracePeriodSeconds: 10 |
| 96 |
volumes: |
96 |
volumes: |
| 97 |
- emptyDir: {} |
97 |
- emptyDir: {} |
| 98 |
name: scratch-data |
98 |
name: scratch-data |
| 99 |
- name: webhook-certificates |
99 |
- name: webhook-certificates |
| 100 |
secret: |
100 |
secret: |
| 101 |
defaultMode: 420 |
101 |
defaultMode: 420 |
| 102 |
optional: true |
102 |
optional: true |
| 103 |
secretName: cnpg-webhook-cert |
103 |
secretName: cnpg-webhook-cert |
| 104 |
|
104 |
|