84 lines
3.5 KiB
YAML
84 lines
3.5 KiB
YAML
{{- if and (eq (.Values.csi.enabled | toString) "true" ) (eq (.Values.global.enabled | toString) "true") }}
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: {{ template "vault.fullname" . }}-csi-provider
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
app.kubernetes.io/name: {{ include "vault.name" . }}-csi-provider
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
|
{{ template "csi.daemonSet.annotations" . }}
|
|
spec:
|
|
updateStrategy:
|
|
type: {{ .Values.csi.daemonSet.updateStrategy.type }}
|
|
{{- if .Values.csi.daemonSet.updateStrategy.maxUnavailable }}
|
|
rollingUpdate:
|
|
maxUnavailable: {{ .Values.csi.daemonSet.updateStrategy.maxUnavailable }}
|
|
{{- end }}
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: {{ include "vault.name" . }}-csi-provider
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/name: {{ template "vault.name" . }}-csi-provider
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
{{ template "csi.pod.annotations" . }}
|
|
spec:
|
|
serviceAccountName: {{ template "vault.fullname" . }}-csi-provider
|
|
{{- template "csi.pod.tolerations" . }}
|
|
containers:
|
|
- name: {{ include "vault.name" . }}-csi-provider
|
|
{{ template "csi.resources" . }}
|
|
image: "{{ .Values.csi.image.repository }}:{{ .Values.csi.image.tag }}"
|
|
imagePullPolicy: {{ .Values.csi.image.pullPolicy }}
|
|
args:
|
|
- --endpoint=/provider/vault.sock
|
|
- --debug={{ .Values.csi.debug }}
|
|
{{- if .Values.csi.extraArgs }}
|
|
{{- toYaml .Values.csi.extraArgs | nindent 12 }}
|
|
{{- end }}
|
|
volumeMounts:
|
|
- name: providervol
|
|
mountPath: "/provider"
|
|
- name: mountpoint-dir
|
|
mountPath: /var/lib/kubelet/pods
|
|
mountPropagation: HostToContainer
|
|
{{- if .Values.csi.volumeMounts }}
|
|
{{- toYaml .Values.csi.volumeMounts | nindent 12}}
|
|
{{- end }}
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /health/ready
|
|
port: 8080
|
|
failureThreshold: {{ .Values.csi.livenessProbe.failureThreshold }}
|
|
initialDelaySeconds: {{ .Values.csi.livenessProbe.initialDelaySeconds }}
|
|
periodSeconds: {{ .Values.csi.livenessProbe.periodSeconds }}
|
|
successThreshold: {{ .Values.csi.livenessProbe.successThreshold }}
|
|
timeoutSeconds: {{ .Values.csi.livenessProbe.timeoutSeconds }}
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /health/ready
|
|
port: 8080
|
|
failureThreshold: {{ .Values.csi.readinessProbe.failureThreshold }}
|
|
initialDelaySeconds: {{ .Values.csi.readinessProbe.initialDelaySeconds }}
|
|
periodSeconds: {{ .Values.csi.readinessProbe.periodSeconds }}
|
|
successThreshold: {{ .Values.csi.readinessProbe.successThreshold }}
|
|
timeoutSeconds: {{ .Values.csi.readinessProbe.timeoutSeconds }}
|
|
volumes:
|
|
- name: providervol
|
|
hostPath:
|
|
path: "/etc/kubernetes/secrets-store-csi-providers"
|
|
- name: mountpoint-dir
|
|
hostPath:
|
|
path: /var/lib/kubelet/pods
|
|
{{- if .Values.csi.volumes }}
|
|
{{- toYaml .Values.csi.volumes | nindent 8}}
|
|
{{- end }}
|
|
{{- if .Values.global.imagePullSecrets }}
|
|
imagePullSecrets:
|
|
{{- toYaml .Values.global.imagePullSecrets | nindent 8 }}
|
|
{{- end }}
|
|
{{- end }}
|