Changed deploy name, and made pod listen on non privilaged port

This commit is contained in:
Tim Dawson 2021-07-15 10:10:38 +12:00
parent 2f4396c2e5
commit 800668d59b
5 changed files with 10 additions and 9 deletions

View file

@ -1,7 +1,7 @@
OS ?= $(shell go env GOOS) OS ?= $(shell go env GOOS)
ARCH ?= $(shell go env GOARCH) ARCH ?= $(shell go env GOARCH)
IMAGE_NAME := "webhook" IMAGE_NAME := "quay.io/tidawson/pdns-webhook"
IMAGE_TAG := "latest" IMAGE_TAG := "latest"
OUT := $(shell pwd)/_out OUT := $(shell pwd)/_out
@ -31,8 +31,8 @@ build:
.PHONY: rendered-manifest.yaml .PHONY: rendered-manifest.yaml
rendered-manifest.yaml: rendered-manifest.yaml:
helm template \ helm3.6 template \
--name example-webhook \ pdns-webhook \
--set image.repository=$(IMAGE_NAME) \ --set image.repository=$(IMAGE_NAME) \
--set image.tag=$(IMAGE_TAG) \ --set image.tag=$(IMAGE_TAG) \
deploy/example-webhook > "$(OUT)/rendered-manifest.yaml" deploy/example-webhook > "$(OUT)/rendered-manifest.yaml"

View file

@ -1,5 +1,5 @@
apiVersion: v1 apiVersion: v1
appVersion: "1.0" appVersion: "1.0"
description: A Helm chart for Kubernetes description: A Helm chart for Kubernetes
name: example-webhook name: pdns-webhook
version: 0.1.0 version: 0.1.0

View file

@ -27,23 +27,24 @@ spec:
args: args:
- --tls-cert-file=/tls/tls.crt - --tls-cert-file=/tls/tls.crt
- --tls-private-key-file=/tls/tls.key - --tls-private-key-file=/tls/tls.key
- --secure-port=8043
env: env:
- name: GROUP_NAME - name: GROUP_NAME
value: {{ .Values.groupName | quote }} value: {{ .Values.groupName | quote }}
ports: ports:
- name: https - name: https
containerPort: 443 containerPort: 8043
protocol: TCP protocol: TCP
livenessProbe: livenessProbe:
httpGet: httpGet:
scheme: HTTPS scheme: HTTPS
path: /healthz path: /healthz
port: https port: 8043
readinessProbe: readinessProbe:
httpGet: httpGet:
scheme: HTTPS scheme: HTTPS
path: /healthz path: /healthz
port: https port: 8043
volumeMounts: volumeMounts:
- name: certs - name: certs
mountPath: /tls mountPath: /tls

View file

@ -11,7 +11,7 @@ spec:
type: {{ .Values.service.type }} type: {{ .Values.service.type }}
ports: ports:
- port: {{ .Values.service.port }} - port: {{ .Values.service.port }}
targetPort: https targetPort: 8043
protocol: TCP protocol: TCP
name: https name: https
selector: selector:

View file

@ -13,7 +13,7 @@ certManager:
serviceAccountName: cert-manager serviceAccountName: cert-manager
image: image:
repository: mycompany/webhook-image repository: quay.io/tidawson/pdns-webhook
tag: latest tag: latest
pullPolicy: IfNotPresent pullPolicy: IfNotPresent