Files
open-cluster-management/deploy/cluster-manager/config/operator/operator.yaml
Zhiwei Yin 4227c8f68c Revert "Fix PodSecurity Warnings (#250)" (#252)
This reverts commit ecc541d186.

Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2023-08-21 00:58:12 -02:30

70 lines
1.8 KiB
YAML

kind: Deployment
apiVersion: apps/v1
metadata:
name: cluster-manager
namespace: open-cluster-management
labels:
app: cluster-manager
spec:
replicas: 3
selector:
matchLabels:
app: cluster-manager
template:
metadata:
labels:
app: cluster-manager
spec:
affinity:
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 70
podAffinityTerm:
topologyKey: failure-domain.beta.kubernetes.io/zone
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- cluster-manager
- weight: 30
podAffinityTerm:
topologyKey: kubernetes.io/hostname
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- cluster-manager
serviceAccountName: cluster-manager
containers:
- name: registration-operator
image: quay.io/open-cluster-management/registration-operator:latest
args:
- "/registration-operator"
- "hub"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
runAsNonRoot: true
livenessProbe:
httpGet:
path: /healthz
scheme: HTTPS
port: 8443
initialDelaySeconds: 2
periodSeconds: 10
readinessProbe:
httpGet:
path: /healthz
scheme: HTTPS
port: 8443
initialDelaySeconds: 2
resources:
requests:
cpu: 100m
memory: 128Mi