Files
mariadb-operator/config/manager/manager.yaml
2025-03-21 15:16:33 +01:00

100 lines
3.3 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: controller-manager
namespace: mariadb-system
labels:
control-plane: controller-manager
app.kubernetes.io/name: deployment
app.kubernetes.io/instance: controller-manager
app.kubernetes.io/component: manager
app.kubernetes.io/created-by: mariadb-operator
app.kubernetes.io/part-of: mariadb-operator
app.kubernetes.io/managed-by: kustomize
spec:
selector:
matchLabels:
control-plane: mariadb-operator-controller-manager
replicas: 1
template:
metadata:
annotations:
kubectl.kubernetes.io/default-container: mariadb-operator
labels:
control-plane: mariadb-operator-controller-manager
spec:
securityContext:
runAsNonRoot: true
containers:
- args:
- --leader-elect
- --webhook
- --webhook-cert-dir=/tmp/k8s-webhook-server/serving-certs
- --webhook-port=9443
image: controller:latest
name: mariadb-operator
ports:
- containerPort: 9443
protocol: TCP
name: https
- containerPort: 8080
protocol: TCP
name: metrics
- containerPort: 8081
protocol: TCP
name: health
env:
- name: RELATED_IMAGE_MARIADB
value: docker-registry1.mariadb.com/library/mariadb:11.4.5
- name: RELATED_IMAGE_MAXSCALE
value: docker-registry2.mariadb.com/mariadb/maxscale:23.08.5
- name: RELATED_IMAGE_EXPORTER
value: prom/mysqld-exporter:v0.15.1
- name: RELATED_IMAGE_EXPORTER_MAXSCALE
value: docker-registry2.mariadb.com/mariadb/maxscale-prometheus-exporter-ubi:v0.0.1
- name: MARIADB_OPERATOR_IMAGE
value: docker-registry3.mariadb.com/mariadb-operator/mariadb-operator:0.34.0
- name: MARIADB_GALERA_LIB_PATH
value: /usr/lib64/galera/libgalera_smm.so
- name: MARIADB_DEFAULT_VERSION
value: "11.4"
- name: WATCH_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.annotations['olm.targetNamespaces']
- name: MARIADB_OPERATOR_NAME
valueFrom:
fieldRef:
fieldPath: spec.serviceAccountName
- name: MARIADB_OPERATOR_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: MARIADB_OPERATOR_SA_PATH
value: /var/run/secrets/kubernetes.io/serviceaccount/token
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- "ALL"
livenessProbe:
httpGet:
path: /healthz
port: 8081
initialDelaySeconds: 15
periodSeconds: 20
readinessProbe:
httpGet:
path: /readyz
port: 8081
initialDelaySeconds: 5
periodSeconds: 10
resources:
limits:
memory: 4Gi
requests:
cpu: 100m
memory: 128Mi
serviceAccountName: mariadb-operator-manager
terminationGracePeriodSeconds: 10