29 lines
1.3 KiB
Jsonnet
29 lines
1.3 KiB
Jsonnet
local k = import "ksonnet.beta.3/k.libsonnet";
|
|
|
|
local version = "v0.19.0";
|
|
|
|
local deployment = k.apps.v1beta2.deployment;
|
|
local container = k.apps.v1beta2.deployment.mixin.spec.template.spec.containersType;
|
|
local containerPort = container.portsType;
|
|
|
|
local targetPort = 8080;
|
|
local podLabels = {"k8s-app": "prometheus-operator"};
|
|
|
|
local operatorContainer =
|
|
container.new("prometheus-operator", "quay.io/coreos/prometheus-operator:" + version) +
|
|
container.withPorts(containerPort.newNamed("http", targetPort)) +
|
|
container.withArgs(["--kubelet-service=kube-system/kubelet", "--config-reloader-image=quay.io/coreos/configmap-reload:v0.0.1"]) +
|
|
container.mixin.resources.withRequests({cpu: "100m", memory: "50Mi"}) +
|
|
container.mixin.resources.withLimits({cpu: "200m", memory: "100Mi"});
|
|
|
|
{
|
|
new(namespace)::
|
|
deployment.new("prometheus-operator", 1, operatorContainer, podLabels) +
|
|
deployment.mixin.metadata.withNamespace(namespace) +
|
|
deployment.mixin.metadata.withLabels(podLabels) +
|
|
deployment.mixin.spec.selector.withMatchLabels(podLabels) +
|
|
deployment.mixin.spec.template.spec.securityContext.withRunAsNonRoot(true) +
|
|
deployment.mixin.spec.template.spec.securityContext.withRunAsUser(65534) +
|
|
deployment.mixin.spec.template.spec.withServiceAccountName("prometheus-operator")
|
|
}
|