...

Text file src/github.com/linkerd/linkerd2/viz/charts/linkerd-viz/templates/namespace-metadata.yaml

Documentation: github.com/linkerd/linkerd2/viz/charts/linkerd-viz/templates

     1{{- if .Values.createNamespaceMetadataJob}}
     2apiVersion: batch/v1
     3kind: Job
     4metadata:
     5  annotations:
     6    {{ include "partials.annotations.created-by" . }}
     7    "helm.sh/hook": post-install
     8    "helm.sh/hook-weight": "1"
     9    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
    10  labels:
    11    linkerd.io/extension: viz
    12    app.kubernetes.io/name: namespace-metadata
    13    app.kubernetes.io/part-of: Linkerd
    14    app.kubernetes.io/version: {{default .Values.linkerdVersion .Values.cliVersion}}
    15    {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
    16  name: namespace-metadata
    17  namespace: {{.Release.Namespace}}
    18spec:
    19  template:
    20    metadata:
    21      annotations:
    22        {{ include "partials.annotations.created-by" . }}
    23        linkerd.io/inject: disabled
    24      labels:
    25        linkerd.io/extension: viz
    26        app.kubernetes.io/name: namespace-metadata
    27        app.kubernetes.io/part-of: Linkerd
    28        app.kubernetes.io/version: {{default .Values.linkerdVersion .Values.cliVersion}}
    29        {{- with .Values.podLabels }}{{ toYaml . | trim | nindent 8 }}{{- end }}
    30    spec:
    31      {{- if .Values.namespaceMetadata.tolerations -}}
    32      {{- include "linkerd.tolerations" (dict "Values" .Values.namespaceMetadata) | nindent 6 }}
    33      {{- end -}}
    34      {{- include "linkerd.node-selector" (dict "Values" .Values.namespaceMetadata) | nindent 6 }}
    35      restartPolicy: Never
    36      securityContext:
    37        seccompProfile:
    38          type: RuntimeDefault
    39      serviceAccountName: namespace-metadata
    40      containers:
    41      - name: namespace-metadata
    42        image: {{.Values.namespaceMetadata.image.registry | default .Values.defaultRegistry}}/{{.Values.namespaceMetadata.image.name}}:{{.Values.namespaceMetadata.image.tag}}
    43        imagePullPolicy: {{.Values.namespaceMetadata.image.pullPolicy | default .Values.defaultImagePullPolicy}}
    44        securityContext:
    45          allowPrivilegeEscalation: false
    46          capabilities:
    47            drop:
    48            - ALL
    49          runAsNonRoot: true
    50          readOnlyRootFilesystem: true
    51          runAsUser: {{.Values.defaultUID}}
    52          runAsUser: {{.Values.defaultGID}}
    53          seccompProfile:
    54            type: RuntimeDefault
    55        args:
    56        - --log-format
    57        - {{.Values.defaultLogFormat}}
    58        - --log-level
    59        - {{.Values.defaultLogLevel}}
    60        - --extension
    61        - viz
    62        - --namespace
    63        - {{.Release.Namespace}}
    64        - --linkerd-namespace
    65        - {{.Values.linkerdNamespace}}
    66        {{- with .Values.prometheusUrl }}
    67        - --prometheus-url
    68        - {{.}}
    69        {{- end }}
    70{{- end }}

View as plain text