Files
open-cluster-management/deploy/cluster-manager/config/operator/operator.yaml
Zhiwei Yin 2e07fda72f update deployment securityContext (#329)
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2023-12-08 02:56:10 +00:00

82 lines
2.1 KiB
YAML

kind: Deployment
apiVersion: apps/v1
metadata:
name: cluster-manager
namespace: open-cluster-management
labels:
app: cluster-manager
spec:
replicas: 3
selector:
matchLabels:
app: cluster-manager
template:
metadata:
labels:
app: cluster-manager
spec:
affinity:
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 70
podAffinityTerm:
topologyKey: failure-domain.beta.kubernetes.io/zone
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- cluster-manager
- weight: 30
podAffinityTerm:
topologyKey: kubernetes.io/hostname
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- cluster-manager
serviceAccountName: cluster-manager
containers:
- name: registration-operator
image: quay.io/open-cluster-management/registration-operator:latest
args:
- "/registration-operator"
- "hub"
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
runAsNonRoot: true
readOnlyRootFilesystem: true
livenessProbe:
httpGet:
path: /healthz
scheme: HTTPS
port: 8443
initialDelaySeconds: 2
periodSeconds: 10
readinessProbe:
httpGet:
path: /healthz
scheme: HTTPS
port: 8443
initialDelaySeconds: 2
resources:
requests:
cpu: 2m
memory: 16Mi
volumeMounts:
- name: tmpdir
mountPath: /tmp
volumes:
- name: tmpdir
emptyDir: { }