2019-12-08 00:41:54 +03:00
|
|
|
let kubernetes =
|
2023-06-21 04:00:18 +03:00
|
|
|
../package.dhall
|
2023-12-28 22:58:28 +03:00
|
|
|
sha256:263ee915ef545f2d771fdcd5cfa4fbb7f62772a861b5c197f998e5b71219112c
|
2019-11-18 19:22:19 +03:00
|
|
|
|
|
|
|
let release = "wintering-rodent"
|
|
|
|
|
|
|
|
let name = "aws-iam-authenticator"
|
|
|
|
|
|
|
|
let fullName = "${release}-${name}"
|
|
|
|
|
|
|
|
let version = "0.1.1"
|
|
|
|
|
|
|
|
let chart = "${name}-${version}"
|
|
|
|
|
|
|
|
let heritage = "dhall"
|
|
|
|
|
|
|
|
in kubernetes.DaemonSet::{
|
2020-01-30 18:23:13 +03:00
|
|
|
, metadata = kubernetes.ObjectMeta::{
|
2020-04-24 22:46:00 +03:00
|
|
|
, name = Some fullName
|
2020-07-14 17:51:57 +03:00
|
|
|
, labels = Some (toMap { app = name, chart, release, heritage })
|
2020-01-30 18:23:13 +03:00
|
|
|
}
|
|
|
|
, spec = Some kubernetes.DaemonSetSpec::{
|
2020-01-31 17:52:20 +03:00
|
|
|
, selector = kubernetes.LabelSelector::{
|
2020-07-14 17:51:57 +03:00
|
|
|
, matchLabels = Some (toMap { app = name, release })
|
2020-01-31 17:52:20 +03:00
|
|
|
}
|
2020-01-30 18:23:13 +03:00
|
|
|
, updateStrategy = Some kubernetes.DaemonSetUpdateStrategy::{
|
|
|
|
, type = Some "RollingUpdate"
|
2019-12-08 00:41:54 +03:00
|
|
|
}
|
2020-01-30 18:23:13 +03:00
|
|
|
, template = kubernetes.PodTemplateSpec::{
|
2021-01-15 20:10:08 +03:00
|
|
|
, metadata = Some kubernetes.ObjectMeta::{
|
2020-04-24 22:46:00 +03:00
|
|
|
, name = Some name
|
2020-01-31 17:52:20 +03:00
|
|
|
, annotations = Some
|
|
|
|
(toMap { `scheduler.alpha.kubernetes.io/critical-pod` = "" })
|
2020-07-14 17:51:57 +03:00
|
|
|
, labels = Some (toMap { app = name, release })
|
2020-01-30 18:23:13 +03:00
|
|
|
}
|
|
|
|
, spec = Some kubernetes.PodSpec::{
|
|
|
|
, hostNetwork = Some True
|
2020-01-31 17:52:20 +03:00
|
|
|
, nodeSelector = Some
|
|
|
|
(toMap { `node-role.kubernetes.io/master` = "" })
|
|
|
|
, tolerations = Some
|
2020-07-14 17:51:57 +03:00
|
|
|
[ kubernetes.Toleration::{
|
|
|
|
, effect = Some "NoSchedule"
|
|
|
|
, key = Some "node-role.kubernetes.io/master"
|
|
|
|
}
|
|
|
|
, kubernetes.Toleration::{
|
|
|
|
, effect = Some "CriticalAddonsOnly"
|
|
|
|
, key = Some "Exists"
|
|
|
|
}
|
|
|
|
]
|
2020-01-30 18:23:13 +03:00
|
|
|
, containers =
|
|
|
|
[ kubernetes.Container::{
|
|
|
|
, name = fullName
|
|
|
|
, image = Some "gcr.io/heptio-images/authenticator:v0.1.0"
|
2020-01-31 17:52:20 +03:00
|
|
|
, args = Some
|
2020-07-14 17:51:57 +03:00
|
|
|
[ "server"
|
|
|
|
, "--config=/etc/aws-iam-authenticator/config.yaml"
|
|
|
|
, "--state-dir=/var/aws-iam-authenticator"
|
|
|
|
, "--generate-kubeconfig=/etc/kubernetes/aws-iam-authenticator/kubeconfig.yaml"
|
|
|
|
]
|
2020-01-31 17:52:20 +03:00
|
|
|
, volumeMounts = Some
|
2020-07-14 17:51:57 +03:00
|
|
|
[ kubernetes.VolumeMount::{
|
|
|
|
, name = "config"
|
|
|
|
, mountPath = "/etc/aws-iam-authenticator/"
|
|
|
|
}
|
|
|
|
, kubernetes.VolumeMount::{
|
|
|
|
, name = "state"
|
|
|
|
, mountPath = "/var/aws-iam-authenticator/"
|
|
|
|
}
|
|
|
|
, kubernetes.VolumeMount::{
|
|
|
|
, name = "output"
|
|
|
|
, mountPath = "/etc/kubernetes/aws-iam-authenticator/"
|
|
|
|
}
|
|
|
|
]
|
2019-11-18 19:22:19 +03:00
|
|
|
}
|
2020-01-30 18:23:13 +03:00
|
|
|
]
|
2020-01-31 17:52:20 +03:00
|
|
|
, volumes = Some
|
2020-07-14 17:51:57 +03:00
|
|
|
[ kubernetes.Volume::{
|
|
|
|
, name = "config"
|
|
|
|
, configMap = Some kubernetes.ConfigMapVolumeSource::{
|
|
|
|
, name = Some fullName
|
2020-01-30 18:23:13 +03:00
|
|
|
}
|
2020-07-14 17:51:57 +03:00
|
|
|
}
|
|
|
|
, kubernetes.Volume::{
|
|
|
|
, name = "output"
|
|
|
|
, hostPath = Some kubernetes.HostPathVolumeSource::{
|
|
|
|
, path = "/srv/kubernetes/aws-iam-authenticator/"
|
2020-01-30 18:23:13 +03:00
|
|
|
}
|
2020-07-14 17:51:57 +03:00
|
|
|
}
|
|
|
|
, kubernetes.Volume::{
|
|
|
|
, name = "state"
|
|
|
|
, hostPath = Some kubernetes.HostPathVolumeSource::{
|
|
|
|
, path = "/srv/kubernetes/aws-iam-authenticator/"
|
2020-01-30 18:23:13 +03:00
|
|
|
}
|
2020-07-14 17:51:57 +03:00
|
|
|
}
|
|
|
|
]
|
2019-11-18 19:22:19 +03:00
|
|
|
}
|
2020-01-30 18:23:13 +03:00
|
|
|
}
|
|
|
|
}
|
2019-11-18 19:22:19 +03:00
|
|
|
}
|