1055 lines
31 KiB
YAML
1055 lines
31 KiB
YAML
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: tekton-pipelines-remote-resolvers
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: resolvers
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
name: tekton-pipelines-remote-resolvers
|
|
namespace: tekton-pipelines-resolvers
|
|
spec:
|
|
ports:
|
|
- name: http-metrics
|
|
port: 9090
|
|
protocol: TCP
|
|
targetPort: 9090
|
|
- name: http-profiling
|
|
port: 8008
|
|
targetPort: 8008
|
|
- name: probes
|
|
port: 8080
|
|
selector:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: resolvers
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: tekton-dashboard
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: dashboard
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
app.kubernetes.io/version: v0.44.0
|
|
dashboard.tekton.dev/release: v0.44.0
|
|
version: v0.44.0
|
|
name: tekton-dashboard
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
ports:
|
|
- name: http
|
|
port: 9097
|
|
protocol: TCP
|
|
targetPort: 9097
|
|
selector:
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: dashboard
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: tekton-events-controller
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: events
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
name: tekton-events-controller
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
ports:
|
|
- name: http-metrics
|
|
port: 9090
|
|
protocol: TCP
|
|
targetPort: 9090
|
|
- name: http-profiling
|
|
port: 8008
|
|
targetPort: 8008
|
|
- name: probes
|
|
port: 8080
|
|
selector:
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: events
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: tekton-pipelines-controller
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: controller
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
name: tekton-pipelines-controller
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
ports:
|
|
- name: http-metrics
|
|
port: 9090
|
|
protocol: TCP
|
|
targetPort: 9090
|
|
- name: http-profiling
|
|
port: 8008
|
|
targetPort: 8008
|
|
- name: probes
|
|
port: 8080
|
|
selector:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: controller
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: tekton-pipelines-webhook
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
ports:
|
|
- name: http-metrics
|
|
port: 9090
|
|
targetPort: metrics
|
|
- name: http-profiling
|
|
port: 8008
|
|
targetPort: profiling
|
|
- name: https-webhook
|
|
port: 443
|
|
targetPort: https-webhook
|
|
- name: probes
|
|
port: 8080
|
|
targetPort: probes
|
|
selector:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: tekton-triggers-controller
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: controller
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
app.kubernetes.io/version: v0.26.1
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
name: tekton-triggers-controller
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
ports:
|
|
- name: http-metrics
|
|
port: 9000
|
|
protocol: TCP
|
|
targetPort: 9000
|
|
selector:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: controller
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: tekton-triggers-core-interceptors
|
|
app.kubernetes.io/component: interceptors
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: tekton-triggers-core-interceptors
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
app.kubernetes.io/version: v0.26.1
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
name: tekton-triggers-core-interceptors
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
ports:
|
|
- name: https
|
|
port: 8443
|
|
selector:
|
|
app.kubernetes.io/component: interceptors
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: core-interceptors
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: tekton-triggers-webhook
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
app.kubernetes.io/version: v0.26.1
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
name: tekton-triggers-webhook
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
ports:
|
|
- name: https-webhook
|
|
port: 443
|
|
targetPort: 8443
|
|
selector:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: resolvers
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
name: tekton-pipelines-remote-resolvers
|
|
namespace: tekton-pipelines-resolvers
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: resolvers
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: tekton-pipelines-resolvers
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: resolvers
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
spec:
|
|
affinity:
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: resolvers
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: resolvers
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
topologyKey: kubernetes.io/hostname
|
|
weight: 100
|
|
containers:
|
|
- env:
|
|
- name: SYSTEM_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: CONFIG_LOGGING_NAME
|
|
value: config-logging
|
|
- name: CONFIG_OBSERVABILITY_NAME
|
|
value: config-observability
|
|
- name: CONFIG_FEATURE_FLAGS_NAME
|
|
value: feature-flags
|
|
- name: CONFIG_LEADERELECTION_NAME
|
|
value: config-leader-election-resolvers
|
|
- name: METRICS_DOMAIN
|
|
value: tekton.dev/resolution
|
|
- name: PROBES_PORT
|
|
value: "8080"
|
|
- name: ARTIFACT_HUB_API
|
|
value: https://artifacthub.io/
|
|
- name: TEKTON_HUB_API
|
|
value: https://api.hub.tekton.dev/
|
|
image: reg.inje-private.com/nnd002/tektoncd/pipeline/cmd/resolvers:v0.63.0
|
|
name: controller
|
|
ports:
|
|
- containerPort: 9090
|
|
name: metrics
|
|
- containerPort: 8008
|
|
name: profiling
|
|
- containerPort: 8080
|
|
name: probes
|
|
resources:
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 4Gi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 100Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: true
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
nodeSelector:
|
|
node-type: worker
|
|
# magnum.openstack.org/nodegroup: default-worker
|
|
serviceAccountName: tekton-pipelines-resolvers
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
app: tekton-dashboard
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: dashboard
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
app.kubernetes.io/version: v0.44.0
|
|
dashboard.tekton.dev/release: v0.44.0
|
|
version: v0.44.0
|
|
name: tekton-dashboard
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: dashboard
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: tekton-dashboard
|
|
app.kubernetes.io/component: dashboard
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: dashboard
|
|
app.kubernetes.io/part-of: tekton-dashboard
|
|
app.kubernetes.io/version: v0.44.0
|
|
name: tekton-dashboard
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- --port=9097
|
|
- --logout-url=
|
|
- --pipelines-namespace=tekton-pipelines
|
|
- --triggers-namespace=tekton-pipelines
|
|
- --read-only=false
|
|
- --log-level=info
|
|
- --log-format=json
|
|
- --namespaces=
|
|
- --stream-logs=true
|
|
- --external-logs=
|
|
env:
|
|
- name: INSTALLED_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
image: reg.inje-private.com/nnd002/tektoncd/dashboard/cmd/dashboard:v0.50.0
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: 9097
|
|
name: tekton-dashboard
|
|
ports:
|
|
- containerPort: 9097
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /readiness
|
|
port: 9097
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
nodeSelector:
|
|
#kubernetes.io/os: linux
|
|
#magnum.openstack.org/nodegroup: default-worker
|
|
node-type: worker
|
|
serviceAccountName: tekton-dashboard
|
|
volumes: []
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: events
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
name: tekton-events-controller
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: events
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: tekton-events-controller
|
|
app.kubernetes.io/component: events
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: events
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
spec:
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: kubernetes.io/os
|
|
operator: NotIn
|
|
values:
|
|
- windows
|
|
containers:
|
|
- args: []
|
|
env:
|
|
- name: SYSTEM_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: CONFIG_DEFAULTS_NAME
|
|
value: config-defaults
|
|
- name: CONFIG_LOGGING_NAME
|
|
value: config-logging
|
|
- name: CONFIG_OBSERVABILITY_NAME
|
|
value: config-observability
|
|
- name: CONFIG_LEADERELECTION_NAME
|
|
value: config-leader-election-events
|
|
- name: SSL_CERT_FILE
|
|
value: /etc/config-registry-cert/cert
|
|
- name: SSL_CERT_DIR
|
|
value: /etc/ssl/certs
|
|
image: reg.inje-private.com/nnd002/tektoncd/pipeline/cmd/events:v0.63.0
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: probes
|
|
scheme: HTTP
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
name: tekton-events-controller
|
|
ports:
|
|
- containerPort: 9090
|
|
name: metrics
|
|
- containerPort: 8008
|
|
name: profiling
|
|
- containerPort: 8080
|
|
name: probes
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /readiness
|
|
port: probes
|
|
scheme: HTTP
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
volumeMounts:
|
|
- mountPath: /etc/config-logging
|
|
name: config-logging
|
|
- mountPath: /etc/config-registry-cert
|
|
name: config-registry-cert
|
|
nodeSelector:
|
|
node-type: worker
|
|
#magnum.openstack.org/nodegroup: default-worker
|
|
serviceAccountName: tekton-events-controller
|
|
volumes:
|
|
- configMap:
|
|
name: config-logging
|
|
name: config-logging
|
|
- configMap:
|
|
name: config-registry-cert
|
|
name: config-registry-cert
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: controller
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
name: tekton-pipelines-controller
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: controller
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: tekton-pipelines-controller
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: controller
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
spec:
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: kubernetes.io/os
|
|
operator: NotIn
|
|
values:
|
|
- windows
|
|
containers:
|
|
- args:
|
|
- -entrypoint-image
|
|
- reg.inje-private.com/nnd002/tektoncd/pipeline/cmd/entrypoint:v0.63.0
|
|
- -nop-image
|
|
- reg.inje-private.com/nnd002/tektoncd/pipeline/cmd/nop:v0.63.0
|
|
- -sidecarlogresults-image
|
|
- reg.inje-private.com/nnd002/tektoncd/pipeline/cmd/sidecarlogresults:v0.63.0
|
|
- -workingdirinit-image
|
|
- reg.inje-private.com/nnd002/tektoncd/pipeline/cmd/workingdirinit:v0.63.0
|
|
- -shell-image
|
|
- reg.inje-private.com/nnd002/chainguard/busybox
|
|
- -shell-image-win
|
|
- mcr.microsoft.com/powershell:nanoserver
|
|
env:
|
|
- name: SYSTEM_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: CONFIG_DEFAULTS_NAME
|
|
value: config-defaults
|
|
- name: CONFIG_LOGGING_NAME
|
|
value: config-logging
|
|
- name: CONFIG_OBSERVABILITY_NAME
|
|
value: config-observability
|
|
- name: CONFIG_FEATURE_FLAGS_NAME
|
|
value: feature-flags
|
|
- name: CONFIG_LEADERELECTION_NAME
|
|
value: config-leader-election-controller
|
|
- name: CONFIG_SPIRE
|
|
value: config-spire
|
|
- name: SSL_CERT_FILE
|
|
value: /etc/config-registry-cert/cert
|
|
- name: SSL_CERT_DIR
|
|
value: /etc/ssl/certs
|
|
- name: METRICS_DOMAIN
|
|
value: tekton.dev/pipeline
|
|
image: reg.inje-private.com/nnd002/tektoncd/pipeline/cmd/controller:v0.63.0
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: probes
|
|
scheme: HTTP
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
name: tekton-pipelines-controller
|
|
ports:
|
|
- containerPort: 9090
|
|
name: metrics
|
|
- containerPort: 8008
|
|
name: profiling
|
|
- containerPort: 8080
|
|
name: probes
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /readiness
|
|
port: probes
|
|
scheme: HTTP
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
volumeMounts:
|
|
- mountPath: /etc/config-logging
|
|
name: config-logging
|
|
- mountPath: /etc/config-registry-cert
|
|
name: config-registry-cert
|
|
nodeSelector:
|
|
node-type: worker #by ljh
|
|
# magnum.openstack.org/nodegroup: default-worker
|
|
serviceAccountName: tekton-pipelines-controller
|
|
volumes:
|
|
- configMap:
|
|
name: config-logging
|
|
name: config-logging
|
|
- configMap:
|
|
name: config-registry-cert
|
|
name: config-registry-cert
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: tekton-pipelines-webhook
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
spec:
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: kubernetes.io/os
|
|
operator: NotIn
|
|
values:
|
|
- windows
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
topologyKey: kubernetes.io/hostname
|
|
weight: 100
|
|
containers:
|
|
- env:
|
|
- name: SYSTEM_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: CONFIG_LOGGING_NAME
|
|
value: config-logging
|
|
- name: CONFIG_OBSERVABILITY_NAME
|
|
value: config-observability
|
|
- name: CONFIG_LEADERELECTION_NAME
|
|
value: config-leader-election-webhook
|
|
- name: CONFIG_FEATURE_FLAGS_NAME
|
|
value: feature-flags
|
|
- name: PROBES_PORT
|
|
value: "8080"
|
|
- name: WEBHOOK_PORT
|
|
value: "8443"
|
|
- name: WEBHOOK_ADMISSION_CONTROLLER_NAME
|
|
value: webhook.pipeline.tekton.dev
|
|
- name: WEBHOOK_SERVICE_NAME
|
|
value: tekton-pipelines-webhook
|
|
- name: WEBHOOK_SECRET_NAME
|
|
value: webhook-certs
|
|
- name: METRICS_DOMAIN
|
|
value: tekton.dev/pipeline
|
|
image: reg.inje-private.com/nnd002/tektoncd/pipeline/cmd/webhook:v0.63.0
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: probes
|
|
scheme: HTTP
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
name: webhook
|
|
ports:
|
|
- containerPort: 9090
|
|
name: metrics
|
|
- containerPort: 8008
|
|
name: profiling
|
|
- containerPort: 8443
|
|
name: https-webhook
|
|
- containerPort: 8080
|
|
name: probes
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /readiness
|
|
port: probes
|
|
scheme: HTTP
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 500Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 100Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
nodeSelector:
|
|
node-type: worker
|
|
#magnum.openstack.org/nodegroup: default-worker
|
|
serviceAccountName: tekton-pipelines-webhook
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: controller
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
app.kubernetes.io/version: v0.26.1
|
|
triggers.tekton.dev/release: v0.26.1
|
|
name: tekton-triggers-controller
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: controller
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: tekton-triggers-controller
|
|
app.kubernetes.io/component: controller
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: controller
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
app.kubernetes.io/version: v0.26.1
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- -logtostderr
|
|
- -stderrthreshold
|
|
- INFO
|
|
- -el-image
|
|
- reg.inje-private.com/nnd002/tektoncd/triggers/cmd/eventlistenersink:v0.26.1
|
|
- -el-port
|
|
- "8080"
|
|
- -el-security-context=true
|
|
- -el-events
|
|
- disable
|
|
- -el-readtimeout
|
|
- "5"
|
|
- -el-writetimeout
|
|
- "40"
|
|
- -el-idletimeout
|
|
- "120"
|
|
- -el-timeouthandler
|
|
- "30"
|
|
- -el-httpclient-readtimeout
|
|
- "30"
|
|
- -el-httpclient-keep-alive
|
|
- "30"
|
|
- -el-httpclient-tlshandshaketimeout
|
|
- "10"
|
|
- -el-httpclient-responseheadertimeout
|
|
- "10"
|
|
- -el-httpclient-expectcontinuetimeout
|
|
- "1"
|
|
- -period-seconds
|
|
- "10"
|
|
- -failure-threshold
|
|
- "3"
|
|
env:
|
|
- name: SYSTEM_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: CONFIG_LOGGING_NAME
|
|
value: config-logging-triggers
|
|
- name: CONFIG_OBSERVABILITY_NAME
|
|
value: config-observability-triggers
|
|
- name: CONFIG_DEFAULTS_NAME
|
|
value: config-defaults-triggers
|
|
- name: METRICS_DOMAIN
|
|
value: tekton.dev/triggers
|
|
- name: METRICS_PROMETHEUS_PORT
|
|
value: "9000"
|
|
- name: CONFIG_LEADERELECTION_NAME
|
|
value: config-leader-election-triggers-controllers
|
|
image: reg.inje-private.com/nnd002/tektoncd/triggers/cmd/controller:v0.29.1
|
|
name: tekton-triggers-controller
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
nodeSelector:
|
|
node-type: worker
|
|
#magnum.openstack.org/nodegroup: default-worker
|
|
serviceAccountName: tekton-triggers-controller
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: interceptors
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: core-interceptors
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
app.kubernetes.io/version: v0.26.1
|
|
triggers.tekton.dev/release: v0.26.1
|
|
name: tekton-triggers-core-interceptors
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: interceptors
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: core-interceptors
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: tekton-triggers-core-interceptors
|
|
app.kubernetes.io/component: interceptors
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: core-interceptors
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
app.kubernetes.io/version: v0.26.1
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- -logtostderr
|
|
- -stderrthreshold
|
|
- INFO
|
|
env:
|
|
- name: SYSTEM_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: CONFIG_LOGGING_NAME
|
|
value: config-logging-triggers
|
|
- name: CONFIG_OBSERVABILITY_NAME
|
|
value: config-observability-triggers
|
|
- name: METRICS_DOMAIN
|
|
value: tekton.dev/triggers
|
|
- name: INTERCEPTOR_TLS_SVC_NAME
|
|
value: tekton-triggers-core-interceptors
|
|
- name: INTERCEPTOR_TLS_SECRET_NAME
|
|
value: tekton-triggers-core-interceptors-certs
|
|
image: reg.inje-private.com/nnd002/tektoncd/triggers/cmd/interceptors:v0.29.1
|
|
name: tekton-triggers-core-interceptors
|
|
ports:
|
|
- containerPort: 8443
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /ready
|
|
port: 8443
|
|
scheme: HTTPS
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
nodeSelector:
|
|
node-type: worker
|
|
#magnum.openstack.org/nodegroup: default-worker
|
|
serviceAccountName: tekton-triggers-core-interceptors
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
app.kubernetes.io/version: v0.26.1
|
|
triggers.tekton.dev/release: v0.26.1
|
|
name: tekton-triggers-webhook
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: tekton-triggers-webhook
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-triggers
|
|
app.kubernetes.io/version: v0.26.1
|
|
triggers.tekton.dev/release: v0.26.1
|
|
version: v0.26.1
|
|
spec:
|
|
containers:
|
|
- env:
|
|
- name: SYSTEM_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: CONFIG_LOGGING_NAME
|
|
value: config-logging-triggers
|
|
- name: WEBHOOK_SERVICE_NAME
|
|
value: tekton-triggers-webhook
|
|
- name: WEBHOOK_SECRET_NAME
|
|
value: triggers-webhook-certs
|
|
- name: METRICS_DOMAIN
|
|
value: tekton.dev/triggers
|
|
- name: CONFIG_LEADERELECTION_NAME
|
|
value: config-leader-election-triggers-webhook
|
|
image: reg.inje-private.com/nnd002/tektoncd/triggers/cmd/webhook:v0.29.1
|
|
name: webhook
|
|
ports:
|
|
- containerPort: 9000
|
|
name: metrics
|
|
- containerPort: 8008
|
|
name: profiling
|
|
- containerPort: 8443
|
|
name: https-webhook
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
nodeSelector:
|
|
node-type: worker
|
|
#magnum.openstack.org/nodegroup: default-worker
|
|
serviceAccountName: tekton-triggers-webhook
|
|
---
|
|
apiVersion: autoscaling/v2
|
|
kind: HorizontalPodAutoscaler
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/component: webhook
|
|
app.kubernetes.io/instance: default
|
|
app.kubernetes.io/name: webhook
|
|
app.kubernetes.io/part-of: tekton-pipelines
|
|
app.kubernetes.io/version: v0.63.0
|
|
pipeline.tekton.dev/release: v0.63.0
|
|
version: v0.63.0
|
|
name: tekton-pipelines-webhook
|
|
namespace: tekton-pipelines
|
|
spec:
|
|
maxReplicas: 5
|
|
metrics:
|
|
- resource:
|
|
name: cpu
|
|
target:
|
|
averageUtilization: 100
|
|
type: Utilization
|
|
type: Resource
|
|
minReplicas: 1
|
|
scaleTargetRef:
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
name: tekton-pipelines-webhook
|
|
|