zuul-operator/zuul_operator/templates/nodepool-launcher.yaml
James E. Blair fe827fbeb0 Add support for imagePullSecrets
Since we support custom image prefixes, we should also support
imagePullSecrets since they are likely to be in a private registry.

This also updates some nearby documentation which was out of date.

Change-Id: Id43382284a9adde877e2383644a31bda24030b2b
2021-10-01 16:38:36 -07:00

59 lines
1.9 KiB
YAML

---
apiVersion: apps/v1
kind: Deployment
metadata:
name: nodepool-launcher-{{ provider_name }}
labels:
app.kubernetes.io/name: nodepool
app.kubernetes.io/instance: {{ instance_name }}
app.kubernetes.io/part-of: zuul
app.kubernetes.io/component: nodepool-launcher
operator.zuul-ci.org/nodepool-provider: {{ provider_name }}
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/name: nodepool
app.kubernetes.io/instance: {{ instance_name }}
app.kubernetes.io/part-of: zuul
app.kubernetes.io/component: nodepool-launcher
operator.zuul-ci.org/nodepool-provider: {{ provider_name }}
template:
metadata:
labels:
app.kubernetes.io/name: nodepool
app.kubernetes.io/instance: {{ instance_name }}
app.kubernetes.io/part-of: zuul
app.kubernetes.io/component: nodepool-launcher
operator.zuul-ci.org/nodepool-provider: {{ provider_name }}
spec:
imagePullSecrets: {{ spec.imagePullSecrets }}
containers:
- name: launcher
image: {{ spec.imagePrefix }}/nodepool-launcher:{{ spec.nodepoolImageVersion }}
env: {{ spec.env | zuul_to_json }}
volumeMounts:
- name: nodepool-config
mountPath: /etc/nodepool
readOnly: true
- name: zookeeper-client-tls
mountPath: /tls/client
readOnly: true
{%- for name, c in external_config.items() %}
- name: {{ name }}
mountPath: /etc/{{ name }}
readOnly: true
{%- endfor %}
volumes:
- name: nodepool-config
secret:
secretName: {{ nodepool_config_secret_name }}
- name: zookeeper-client-tls
secret:
secretName: zookeeper-client-tls
{%- for name, c in external_config.items() %}
- name: {{ name }}
secret:
secretName: {{ c['secretName'] }}
{%- endfor %}