|
| 1 | +# Code generated by skv2. DO NOT EDIT. |
| 2 | + |
| 3 | + |
| 4 | + |
| 5 | +{{- $painter := $.Values.painter }} |
| 6 | +--- |
| 7 | + |
| 8 | +{{- define "painter.deploymentSpec" }} |
| 9 | + |
| 10 | +# Deployment manifest for painter |
| 11 | + |
| 12 | +apiVersion: apps/v1 |
| 13 | +kind: Deployment |
| 14 | +metadata: |
| 15 | + labels: |
| 16 | + app: painter |
| 17 | + annotations: |
| 18 | + app.kubernetes.io/name: painter |
| 19 | + name: painter |
| 20 | + namespace: {{ default .Release.Namespace $.Values.painter.namespace }} |
| 21 | +spec: |
| 22 | + selector: |
| 23 | + matchLabels: |
| 24 | + app: painter |
| 25 | + template: |
| 26 | + metadata: |
| 27 | + labels: |
| 28 | + app: painter |
| 29 | + annotations: |
| 30 | + app.kubernetes.io/name: painter |
| 31 | + prometheus.io/path: /metrics |
| 32 | + prometheus.io/port: "9091" |
| 33 | + prometheus.io/scrape: "true" |
| 34 | + spec: |
| 35 | + serviceAccountName: painter |
| 36 | + containers: |
| 37 | +{{- $painter := $.Values.painter }} |
| 38 | +{{- $painterImage := $painter.image }} |
| 39 | + - name: painter |
| 40 | + image: {{ $painterImage.registry }}/{{ $painterImage.repository }}:{{ $painterImage.tag }} |
| 41 | + imagePullPolicy: {{ $painterImage.pullPolicy }} |
| 42 | +{{- if $painter.env }} |
| 43 | + env: |
| 44 | +{{ toYaml $painter.env | indent 10 }} |
| 45 | +{{- else if $painter.extraEnvs }} |
| 46 | + env: |
| 47 | +{{- end }} |
| 48 | +{{- range $name, $item := $painter.extraEnvs }} |
| 49 | + - name: {{ $name }} |
| 50 | +{{- $item | toYaml | nindent 12 }} |
| 51 | +{{- end }} |
| 52 | + resources: |
| 53 | +{{- if $painter.resources }} |
| 54 | +{{ toYaml $painter.resources | indent 10}} |
| 55 | +{{- else}} |
| 56 | + requests: |
| 57 | + cpu: 500m |
| 58 | + memory: 256Mi |
| 59 | +{{- end }} |
| 60 | + {{- /* |
| 61 | + Render securityContext configs if it is set. |
| 62 | + If securityContext is not set, render the default securityContext. |
| 63 | + If securityContext is set to 'false', render an empty map. |
| 64 | + */}} |
| 65 | + securityContext: |
| 66 | +{{- if or ($painter.securityContext) (eq "map[]" (printf "%v" $painter.securityContext)) }} |
| 67 | +{{ toYaml $painter.securityContext | indent 10}} |
| 68 | +{{/* Because securityContext is nil by default we can only perform following conversion if it is a boolean. Skip conditional otherwise. */}} |
| 69 | +{{- else if eq (ternary $painter.securityContext true (eq "bool" (printf "%T" $painter.securityContext))) false }} |
| 70 | + {} |
| 71 | +{{- else}} |
| 72 | + runAsNonRoot: true |
| 73 | + {{- if not $painter.floatingUserId }} |
| 74 | + runAsUser: {{ printf "%.0f" (float64 $painter.runAsUser) }} |
| 75 | + {{- end }} |
| 76 | + readOnlyRootFilesystem: true |
| 77 | + allowPrivilegeEscalation: false |
| 78 | + capabilities: |
| 79 | + drop: |
| 80 | + - ALL |
| 81 | +{{- end }} |
| 82 | + {{- if $painterImage.pullSecret }} |
| 83 | + imagePullSecrets: |
| 84 | + - name: {{ $painterImage.pullSecret }} |
| 85 | + {{- end}} |
| 86 | +{{- end }} {{/* define "painter.deploymentSpec" */}} |
| 87 | + |
| 88 | +{{/* Render painter deployment template with overrides from values*/}} |
| 89 | +{{ if $painter.enabled }} |
| 90 | +{{- $painterDeploymentOverrides := dict }} |
| 91 | +{{- if $painter.deploymentOverrides }} |
| 92 | +{{- $painterDeploymentOverrides = $painter.deploymentOverrides }} |
| 93 | +{{- end }} |
| 94 | +--- |
| 95 | +{{ include "skv2.utils.merge" (list . $painterDeploymentOverrides "painter.deploymentSpec") }} |
| 96 | +{{- end }} |
| 97 | +--- |
| 98 | +{{ if $painter.enabled }} |
| 99 | +apiVersion: v1 |
| 100 | +kind: ServiceAccount |
| 101 | +metadata: |
| 102 | + labels: |
| 103 | + app: painter |
| 104 | + {{- if $painter.serviceAccount}} |
| 105 | + {{- if $painter.serviceAccount.extraAnnotations }} |
| 106 | + annotations: |
| 107 | + {{- range $key, $value := $painter.serviceAccount.extraAnnotations }} |
| 108 | + {{ $key }}: {{ $value }} |
| 109 | + {{- end }} |
| 110 | + {{- end }} |
| 111 | + {{- end}} |
| 112 | + name: painter |
| 113 | + namespace: {{ default .Release.Namespace $.Values.painter.namespace }} |
| 114 | +{{- end }} |
| 115 | + |
| 116 | + |
| 117 | +{{- define "painter.serviceSpec"}} |
| 118 | + |
| 119 | +# Service for painter |
| 120 | +{{/* Define variables in function scope */}} |
| 121 | +{{- $painter := $.Values.painter}} |
| 122 | +apiVersion: v1 |
| 123 | +kind: Service |
| 124 | +metadata: |
| 125 | + labels: |
| 126 | + app: painter |
| 127 | + annotations: |
| 128 | + app.kubernetes.io/name: painter |
| 129 | + name: painter |
| 130 | + namespace: {{ default .Release.Namespace $.Values.painter.namespace }} |
| 131 | +spec: |
| 132 | + selector: |
| 133 | + app: painter |
| 134 | + type: {{ $painter.serviceType }} |
| 135 | + ports: |
| 136 | + - name: foo-bar |
| 137 | + port: {{ index $painter "ports" "foo-bar" }} |
| 138 | + |
| 139 | +{{- end }} {{/* define "painter.serviceSpec" */}} |
| 140 | +{{ if $painter.enabled }} |
| 141 | +{{/* Render painter service template with overrides from values*/}} |
| 142 | +{{- $painterServiceOverrides := dict }} |
| 143 | +{{- if $painter.serviceOverrides }} |
| 144 | +{{- $painterServiceOverrides = $painter.serviceOverrides }} |
| 145 | +{{- end }} |
| 146 | + |
| 147 | +--- |
| 148 | + |
| 149 | +{{ include "skv2.utils.merge" (list . $painterServiceOverrides "painter.serviceSpec") }} |
| 150 | +{{- end }} |
| 151 | + |
0 commit comments