Remove flags

This commit is contained in:
Manuel Alejandro de Brito Fontes 2018-10-07 11:27:44 -03:00
parent 44bdc7eb59
commit f3625e24f3

View file

@ -1,5 +1,3 @@
---
kind: ConfigMap kind: ConfigMap
apiVersion: v1 apiVersion: v1
metadata: metadata:
@ -8,7 +6,6 @@ metadata:
app.kubernetes.io/name: ingress-nginx app.kubernetes.io/name: ingress-nginx
app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/part-of: ingress-nginx
--- ---
kind: ConfigMap kind: ConfigMap
apiVersion: v1 apiVersion: v1
metadata: metadata:
@ -17,7 +14,6 @@ metadata:
app.kubernetes.io/name: ingress-nginx app.kubernetes.io/name: ingress-nginx
app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/part-of: ingress-nginx
--- ---
kind: ConfigMap kind: ConfigMap
apiVersion: v1 apiVersion: v1
metadata: metadata:
@ -26,7 +22,6 @@ metadata:
app.kubernetes.io/name: ingress-nginx app.kubernetes.io/name: ingress-nginx
app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/part-of: ingress-nginx
--- ---
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
metadata: metadata:
@ -35,7 +30,6 @@ metadata:
app.kubernetes.io/name: ingress-nginx app.kubernetes.io/name: ingress-nginx
app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/part-of: ingress-nginx
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole kind: ClusterRole
metadata: metadata:
@ -80,10 +74,10 @@ rules:
- apiGroups: - apiGroups:
- "" - ""
resources: resources:
- events - events
verbs: verbs:
- create - create
- patch - patch
- apiGroups: - apiGroups:
- "extensions" - "extensions"
resources: resources:
@ -92,7 +86,6 @@ rules:
- update - update
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1
kind: Role kind: Role
metadata: metadata:
@ -137,7 +130,6 @@ rules:
- get - get
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding kind: RoleBinding
metadata: metadata:
@ -155,7 +147,6 @@ subjects:
namespace: ${NAMESPACE} namespace: ${NAMESPACE}
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
@ -173,7 +164,6 @@ subjects:
namespace: ${NAMESPACE} namespace: ${NAMESPACE}
--- ---
apiVersion: extensions/v1beta1 apiVersion: extensions/v1beta1
kind: Deployment kind: Deployment
metadata: metadata:
@ -193,39 +183,37 @@ spec:
app.kubernetes.io/name: ingress-nginx app.kubernetes.io/name: ingress-nginx
app.kubernetes.io/part-of: ingress-nginx app.kubernetes.io/part-of: ingress-nginx
annotations: annotations:
prometheus.io/port: '10254' prometheus.io/port: "10254"
prometheus.io/scrape: 'true' prometheus.io/scrape: "true"
spec: spec:
terminationGracePeriodSeconds: 0 terminationGracePeriodSeconds: 0
serviceAccountName: nginx-ingress-serviceaccount serviceAccountName: nginx-ingress-serviceaccount
initContainers: initContainers:
- name: enable-coredump - name: enable-coredump
image: busybox image: busybox
command: command:
- /bin/sh - /bin/sh
- -c - -c
- | - |
ulimit -c unlimited ulimit -c unlimited
echo "/tmp/core.%e.%p" > /proc/sys/kernel/core_pattern echo "/tmp/core.%e.%p" > /proc/sys/kernel/core_pattern
sysctl -w fs.suid_dumpable=2 sysctl -w fs.suid_dumpable=2
securityContext: securityContext:
privileged: true privileged: true
containers: containers:
- name: nginx-ingress-controller - name: nginx-ingress-controller
image: ingress-controller/nginx-ingress-controller:dev image: ingress-controller/nginx-ingress-controller:dev
args: args:
- /nginx-ingress-controller - /nginx-ingress-controller
- --configmap=$(POD_NAMESPACE)/nginx-configuration - --configmap=$(POD_NAMESPACE)/nginx-configuration
- --tcp-services-configmap=$(POD_NAMESPACE)/tcp-services
- --udp-services-configmap=$(POD_NAMESPACE)/udp-services
- --publish-service=$(POD_NAMESPACE)/ingress-nginx - --publish-service=$(POD_NAMESPACE)/ingress-nginx
- --annotations-prefix=nginx.ingress.kubernetes.io - --annotations-prefix=nginx.ingress.kubernetes.io
- --watch-namespace=${NAMESPACE} - --watch-namespace=${NAMESPACE}
securityContext: securityContext:
capabilities: capabilities:
drop: drop:
- ALL - ALL
add: add:
- NET_BIND_SERVICE - NET_BIND_SERVICE
# www-data -> 33 # www-data -> 33
runAsUser: 33 runAsUser: 33
@ -239,10 +227,10 @@ spec:
fieldRef: fieldRef:
fieldPath: metadata.namespace fieldPath: metadata.namespace
ports: ports:
- name: http - name: http
containerPort: 80 containerPort: 80
- name: https - name: https
containerPort: 443 containerPort: 443
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
httpGet: httpGet: