Mercurial > code > home > repos > pomerium

annotate kube/04-gen-secrets-job.yaml @ 0:6bf643829330

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
start
author drewp@bigasterisk.com
date Sun, 11 Sep 2022 01:24:55 -0700
parents
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
0
drewp@bigasterisk.com
parents:
diff changeset
1 apiVersion: batch/v1
drewp@bigasterisk.com
parents:
diff changeset
2 kind: Job
drewp@bigasterisk.com
parents:
diff changeset
3 metadata:
drewp@bigasterisk.com
parents:
diff changeset
4 labels:
drewp@bigasterisk.com
parents:
diff changeset
5 app.kubernetes.io/name: pomerium
drewp@bigasterisk.com
parents:
diff changeset
6 name: pomerium-gen-secrets
drewp@bigasterisk.com
parents:
diff changeset
7 namespace: pomerium
drewp@bigasterisk.com
parents:
diff changeset
8 spec:
drewp@bigasterisk.com
parents:
diff changeset
9 template:
drewp@bigasterisk.com
parents:
diff changeset
10 metadata:
drewp@bigasterisk.com
parents:
diff changeset
11 labels:
drewp@bigasterisk.com
parents:
diff changeset
12 app.kubernetes.io/name: pomerium
drewp@bigasterisk.com
parents:
diff changeset
13 name: pomerium-gen-secrets
drewp@bigasterisk.com
parents:
diff changeset
14 spec:
drewp@bigasterisk.com
parents:
diff changeset
15 containers:
drewp@bigasterisk.com
parents:
diff changeset
16 - args:
drewp@bigasterisk.com
parents:
diff changeset
17 - gen-secrets
drewp@bigasterisk.com
parents:
diff changeset
18 - --secrets=$(POD_NAMESPACE)/bootstrap
drewp@bigasterisk.com
parents:
diff changeset
19 env:
drewp@bigasterisk.com
parents:
diff changeset
20 - name: POD_NAMESPACE
drewp@bigasterisk.com
parents:
diff changeset
21 valueFrom:
drewp@bigasterisk.com
parents:
diff changeset
22 fieldRef:
drewp@bigasterisk.com
parents:
diff changeset
23 fieldPath: metadata.namespace
drewp@bigasterisk.com
parents:
diff changeset
24 image: pomerium/ingress-controller:main
drewp@bigasterisk.com
parents:
diff changeset
25 imagePullPolicy: IfNotPresent
drewp@bigasterisk.com
parents:
diff changeset
26 name: gen-secrets
drewp@bigasterisk.com
parents:
diff changeset
27 securityContext:
drewp@bigasterisk.com
parents:
diff changeset
28 allowPrivilegeEscalation: false
drewp@bigasterisk.com
parents:
diff changeset
29 nodeSelector:
drewp@bigasterisk.com
parents:
diff changeset
30 kubernetes.io/os: linux
drewp@bigasterisk.com
parents:
diff changeset
31 restartPolicy: OnFailure
drewp@bigasterisk.com
parents:
diff changeset
32 securityContext:
drewp@bigasterisk.com
parents:
diff changeset
33 fsGroup: 1000
drewp@bigasterisk.com
parents:
diff changeset
34 runAsNonRoot: true
drewp@bigasterisk.com
parents:
diff changeset
35 runAsUser: 1000
drewp@bigasterisk.com
parents:
diff changeset
36 serviceAccountName: pomerium-gen-secrets