Remove ksonnet from kube-rbac-proxy/container.libsonnet
Signed-off-by: Kemal Akkoyun <kakkoyun@gmail.com>
This commit is contained in:
@@ -1,8 +1,3 @@
|
|||||||
local k = import 'github.com/ksonnet/ksonnet-lib/ksonnet.beta.4/k.libsonnet';
|
|
||||||
local deployment = k.apps.v1.deployment;
|
|
||||||
local container = deployment.mixin.spec.template.spec.containersType;
|
|
||||||
local containerPort = container.portsType;
|
|
||||||
|
|
||||||
{
|
{
|
||||||
local krp = self,
|
local krp = self,
|
||||||
config+:: {
|
config+:: {
|
||||||
@@ -33,17 +28,22 @@ local containerPort = container.portsType;
|
|||||||
spec+: {
|
spec+: {
|
||||||
template+: {
|
template+: {
|
||||||
spec+: {
|
spec+: {
|
||||||
containers+: [
|
containers+: [{
|
||||||
container.new(krp.config.kubeRbacProxy.name, krp.config.kubeRbacProxy.image) +
|
name: krp.config.kubeRbacProxy.name,
|
||||||
container.mixin.securityContext.withRunAsUser(65534) +
|
image: krp.config.kubeRbacProxy.image,
|
||||||
container.withArgs([
|
args: [
|
||||||
'--logtostderr',
|
'--logtostderr',
|
||||||
'--secure-listen-address=' + krp.config.kubeRbacProxy.secureListenAddress,
|
'--secure-listen-address=' + krp.config.kubeRbacProxy.secureListenAddress,
|
||||||
'--tls-cipher-suites=' + std.join(',', krp.config.kubeRbacProxy.tlsCipherSuites),
|
'--tls-cipher-suites=' + std.join(',', krp.config.kubeRbacProxy.tlsCipherSuites),
|
||||||
'--upstream=' + krp.config.kubeRbacProxy.upstream,
|
'--upstream=' + krp.config.kubeRbacProxy.upstream,
|
||||||
]) +
|
|
||||||
container.withPorts(containerPort.newNamed(krp.config.kubeRbacProxy.securePort, krp.config.kubeRbacProxy.securePortName)),
|
|
||||||
],
|
],
|
||||||
|
ports: [
|
||||||
|
{ name: krp.config.kubeRbacProxy.securePortName, containerPort: krp.config.kubeRbacProxy.securePort },
|
||||||
|
],
|
||||||
|
securityContext: {
|
||||||
|
runAsUser: 65534,
|
||||||
|
},
|
||||||
|
}],
|
||||||
},
|
},
|
||||||
},
|
},
|
||||||
},
|
},
|
||||||
|
|||||||
Reference in New Issue
Block a user