1apiVersion: v1
2kind: Namespace
3metadata:
4 name: pinitctl
5---
6apiVersion: v1
7kind: ServiceAccount
8metadata:
9 name: pinitctl
10 namespace: pinitctl
11---
12apiVersion: apps/v1
13kind: Deployment
14metadata:
15 name: pinitctl
16 namespace: pinitctl
17spec:
18 replicas: 1
19 selector:
20 matchLabels:
21 platform.edge.ncr.com/component: pinitctl
22 template:
23 metadata:
24 labels:
25 platform.edge.ncr.com/component: pinitctl
26 spec:
27 serviceAccountName: pinitctl
28 containers:
29 - name: pinitctl
30 image: bzl://cmd/f8n/pinitctl:container_push
31 envFrom:
32 - configMapRef:
33 name: pinitctl
34 # merged with existing keys, can be used to pass optional config
35 - configMapRef:
36 name: pinitctl-options
37 optional: true
38 env:
39 - name: RUNTIME_NAMESPACE
40 valueFrom:
41 fieldRef:
42 fieldPath: metadata.namespace
43 resources:
44 limits:
45 cpu: "100m"
46 imagePullPolicy: IfNotPresent
47---
48apiVersion: rbac.authorization.k8s.io/v1
49kind: ClusterRoleBinding
50metadata:
51 name: pinitctl
52roleRef:
53 name: pinitctl
54 kind: ClusterRole
55 apiGroup: rbac.authorization.k8s.io
56subjects:
57- name: pinitctl
58 namespace: pinitctl
59 kind: ServiceAccount
View as plain text