1{{- if .Values.createNamespaceMetadataJob}}
2apiVersion: batch/v1
3kind: Job
4metadata:
5 annotations:
6 {{ include "partials.annotations.created-by" . }}
7 "helm.sh/hook": post-install
8 "helm.sh/hook-weight": "1"
9 "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
10 labels:
11 linkerd.io/extension: multicluster
12 app.kubernetes.io/name: namespace-metadata
13 app.kubernetes.io/part-of: Linkerd
14 app.kubernetes.io/version: {{default .Values.linkerdVersion .Values.cliVersion}}
15 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
16 name: namespace-metadata
17 namespace: {{.Release.Namespace}}
18spec:
19 template:
20 metadata:
21 annotations:
22 {{ include "partials.annotations.created-by" . }}
23 linkerd.io/inject: disabled
24 labels:
25 linkerd.io/extension: multicluster
26 app.kubernetes.io/name: namespace-metadata
27 app.kubernetes.io/part-of: Linkerd
28 app.kubernetes.io/version: {{default .Values.linkerdVersion .Values.cliVersion}}
29 {{- with .Values.podLabels }}{{ toYaml . | trim | nindent 8 }}{{- end }}
30 spec:
31 {{- with .Values.namespaceMetadata.nodeSelector }}
32 nodeSelector: {{ toYaml . | nindent 8 }}
33 {{- end }}
34 {{- with .Values.namespaceMetadata.tolerations }}
35 tolerations: {{ toYaml . | nindent 6 }}
36 {{- end }}
37 restartPolicy: Never
38 securityContext:
39 seccompProfile:
40 type: RuntimeDefault
41 serviceAccountName: namespace-metadata
42 containers:
43 - name: namespace-metadata
44 image: {{.Values.namespaceMetadata.image.registry}}/{{.Values.namespaceMetadata.image.name}}:{{.Values.namespaceMetadata.image.tag}}
45 imagePullPolicy: {{.Values.namespaceMetadata.image.pullPolicy | default .Values.imagePullPolicy}}
46 securityContext:
47 allowPrivilegeEscalation: false
48 capabilities:
49 drop:
50 - ALL
51 readOnlyRootFilesystem: true
52 runAsNonRoot: true
53 runAsUser: {{.Values.gateway.UID}}
54 runAsGroup: {{.Values.gateway.GID}}
55 seccompProfile:
56 type: RuntimeDefault
57 args:
58 - --extension
59 - multicluster
60 - --namespace
61 - {{.Release.Namespace}}
62 - --linkerd-namespace
63 - {{.Values.linkerdNamespace}}
64{{- end }}
View as plain text