lokomotive/assets/charts/components/dex/templates/deployment.yaml at 485252ea68f99bf0fdd0a6694f94bc25efd6746c · kinvolk/lokomotive · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: dex
  name: dex
spec:
  selector:
    matchLabels:
      app: dex
  replicas: 3
  template:
    metadata:
      labels:
        app: dex
      ### Lokomotive specific change.
      annotations:
        checksum/configmap: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
    spec:
      securityContext:
        runAsNonRoot: true
        runAsUser: 65534
        runAsGroup: 65534
      serviceAccountName: dex
      initContainers:
      - name: download-theme
        image: alpine/git:v2.30.1
        command:
        - git
        - clone
        - "https://github.com/kinvolk/dex-theme.git"
        - /theme
        volumeMounts:
        - name: theme
          mountPath: /theme/
      containers:
      - image: ghcr.io/dexidp/dex:{{ .Chart.AppVersion }}
        name: dex
        command: ["/usr/local/bin/dex", "serve", "/etc/dex/cfg/config.yaml"]
        ports:
        - name: https
          containerPort: 5556
        env:
        - name: KUBERNETES_POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: config
          mountPath: /etc/dex/cfg
        - mountPath: /web/themes/custom/
          name: theme
        {{- if .Values.gSuiteJSONConfigPath }}
        - name: gsuite-auth
          mountPath: /config/
        {{- end }}
        readinessProbe:
          httpGet:
            path: /healthz
            port: 5556
      volumes:
      - name: config
        configMap:
          name: dex
          items:
          - key: config.yaml
            path: config.yaml
      - name: theme
        emptyDir: {}
      {{- if .Values.gSuiteJSONConfigPath }}
      - name: gsuite-auth
        secret:
          secretName: gsuite-auth
      {{- end }}