deployment-tracker/deploy/manifest.yaml at a596e6f9be33f1366b4185a87dc148a441b6891e · github/deployment-tracker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
apiVersion: v1
kind: Namespace
metadata:
  name: deployment-tracker
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: deployment-tracker
  namespace: deployment-tracker
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: deployment-tracker
rules:
  - apiGroups: [""]
    resources: ["pods"]
    verbs: ["get", "list", "watch"]
  - apiGroups: ["apps"]
    resources: ["deployments"]
    verbs: ["get", "list", "watch"]
  - apiGroups: ["apps"]
    resources: ["replicasets"]
    verbs: ["get"]
  - apiGroups: ["apps"]
    resources: ["daemonsets"]
    verbs: ["get", "list", "watch"]
  - apiGroups: ["apps"]
    resources: ["statefulsets"]
    verbs: ["get", "list", "watch"]
  - apiGroups: ["batch"]
    resources: ["jobs", "cronjobs"]
    verbs: ["get", "list", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: deployment-tracker
subjects:
  - kind: ServiceAccount
    name: deployment-tracker
    namespace: deployment-tracker
roleRef:
  kind: ClusterRole
  name: deployment-tracker
  apiGroup: rbac.authorization.k8s.io
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: deployment-tracker
  namespace: deployment-tracker
  labels:
    app: deployment-tracker
spec:
  replicas: 1
  selector:
    matchLabels:
      app: deployment-tracker
  template:
    metadata:
      labels:
        app: deployment-tracker
    spec:
      serviceAccountName: deployment-tracker
      containers:
        - name: deployment-tracker
          image: deployment-tracker:latest
          imagePullPolicy: IfNotPresent
          env:
            - name: DN_TEMPLATE
              value: "{{namespace}}/{{deploymentName}}/{{containerName}}"
            - name: GITHUB_ORG
              value: "test-org"
            - name: LOGICAL_ENVIRONMENT
              value: "staging"
            - name: PHYSICAL_ENVIRONMENT
              value: "iad-moda1"
            - name: CLUSTER
              value: "test-cluster"
            - name: BASE_URL
              value: "http://artifact-registry.artifact-registry.svc.cluster.local:9090"
          resources:
            requests:
              memory: "64Mi"
              cpu: "50m"
            limits:
              memory: "128Mi"
              cpu: "100m"
          securityContext:
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            runAsUser: 1000
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL