Changed deploy name, and made pod listen on non privilaged port

This commit is contained in:
Tim Dawson 2021-07-15 10:10:38 +12:00
parent 2f4396c2e5
commit 800668d59b
5 changed files with 10 additions and 9 deletions

View file

@ -1,7 +1,7 @@
OS ?= $(shell go env GOOS)
ARCH ?= $(shell go env GOARCH)
IMAGE_NAME := "webhook"
IMAGE_NAME := "quay.io/tidawson/pdns-webhook"
IMAGE_TAG := "latest"
OUT := $(shell pwd)/_out
@ -31,8 +31,8 @@ build:
.PHONY: rendered-manifest.yaml
rendered-manifest.yaml:
helm template \
--name example-webhook \
helm3.6 template \
pdns-webhook \
--set image.repository=$(IMAGE_NAME) \
--set image.tag=$(IMAGE_TAG) \
deploy/example-webhook > "$(OUT)/rendered-manifest.yaml"

View file

@ -1,5 +1,5 @@
apiVersion: v1
appVersion: "1.0"
description: A Helm chart for Kubernetes
name: example-webhook
name: pdns-webhook
version: 0.1.0

View file

@ -27,23 +27,24 @@ spec:
args:
- --tls-cert-file=/tls/tls.crt
- --tls-private-key-file=/tls/tls.key
- --secure-port=8043
env:
- name: GROUP_NAME
value: {{ .Values.groupName | quote }}
ports:
- name: https
containerPort: 443
containerPort: 8043
protocol: TCP
livenessProbe:
httpGet:
scheme: HTTPS
path: /healthz
port: https
port: 8043
readinessProbe:
httpGet:
scheme: HTTPS
path: /healthz
port: https
port: 8043
volumeMounts:
- name: certs
mountPath: /tls

View file

@ -11,7 +11,7 @@ spec:
type: {{ .Values.service.type }}
ports:
- port: {{ .Values.service.port }}
targetPort: https
targetPort: 8043
protocol: TCP
name: https
selector:

View file

@ -13,7 +13,7 @@ certManager:
serviceAccountName: cert-manager
image:
repository: mycompany/webhook-image
repository: quay.io/tidawson/pdns-webhook
tag: latest
pullPolicy: IfNotPresent