91 lines
3.2 KiB
YAML
91 lines
3.2 KiB
YAML
# Source: kube-prometheus-stack/templates/prometheus-operator/deployment.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: prometheus-community-kube-operator
|
|
namespace: vynil-monitor
|
|
labels:
|
|
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/instance: prometheus-community
|
|
app.kubernetes.io/version: "57.0.3"
|
|
app.kubernetes.io/part-of: kube-prometheus-stack
|
|
chart: kube-prometheus-stack-57.0.3
|
|
release: "prometheus-community"
|
|
heritage: "Helm"
|
|
app: kube-prometheus-stack-operator
|
|
app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
|
|
app.kubernetes.io/component: prometheus-operator
|
|
spec:
|
|
replicas: 1
|
|
revisionHistoryLimit: 10
|
|
selector:
|
|
matchLabels:
|
|
app: kube-prometheus-stack-operator
|
|
release: "prometheus-community"
|
|
template:
|
|
metadata:
|
|
labels:
|
|
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/instance: prometheus-community
|
|
app.kubernetes.io/version: "57.0.3"
|
|
app.kubernetes.io/part-of: kube-prometheus-stack
|
|
chart: kube-prometheus-stack-57.0.3
|
|
release: "prometheus-community"
|
|
heritage: "Helm"
|
|
app: kube-prometheus-stack-operator
|
|
app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
|
|
app.kubernetes.io/component: prometheus-operator
|
|
spec:
|
|
containers:
|
|
- name: kube-prometheus-stack
|
|
image: "quay.io/prometheus-operator/prometheus-operator:v0.72.0"
|
|
imagePullPolicy: "IfNotPresent"
|
|
args:
|
|
- --kubelet-service=kube-system/prometheus-community-kube-kubelet
|
|
- --localhost=127.0.0.1
|
|
- --prometheus-config-reloader=quay.io/prometheus-operator/prometheus-config-reloader:v0.72.0
|
|
- --config-reloader-cpu-request=0
|
|
- --config-reloader-cpu-limit=0
|
|
- --config-reloader-memory-request=0
|
|
- --config-reloader-memory-limit=0
|
|
- --thanos-default-base-image=quay.io/thanos/thanos:v0.34.1
|
|
- --secret-field-selector=type!=kubernetes.io/dockercfg,type!=kubernetes.io/service-account-token,type!=helm.sh/release.v1
|
|
- --web.enable-tls=true
|
|
- --web.cert-file=/cert/tls.crt
|
|
- --web.key-file=/cert/tls.key
|
|
- --web.listen-address=:10250
|
|
- --web.tls-min-version=VersionTLS13
|
|
ports:
|
|
- containerPort: 10250
|
|
name: https
|
|
env:
|
|
- name: GOGC
|
|
value: "30"
|
|
resources:
|
|
{}
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
volumeMounts:
|
|
- name: tls-secret
|
|
mountPath: /cert
|
|
readOnly: true
|
|
volumes:
|
|
- name: tls-secret
|
|
secret:
|
|
defaultMode: 420
|
|
secretName: prometheus-community-kube-admission
|
|
securityContext:
|
|
fsGroup: 65534
|
|
runAsGroup: 65534
|
|
runAsNonRoot: true
|
|
runAsUser: 65534
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
serviceAccountName: prometheus-community-kube-operator
|
|
automountServiceAccountToken: true |