ansible-role-k8s-storage/files/secrets-provider-gopass/provider-gopass-installer.yaml

42 lines
1.2 KiB
YAML

apiVersion: apps/v1
kind: DaemonSet
metadata:
labels:
app: csi-secrets-store-provider-gopass
name: csi-secrets-store-provider-gopass
spec:
updateStrategy:
type: RollingUpdate
selector:
matchLabels:
app: csi-secrets-store-provider-gopass
template:
metadata:
labels:
app: csi-secrets-store-provider-gopass
spec:
tolerations:
containers:
- name: provider-gopass-installer
image: camptocamp/secrets-store-csi-driver-provider-gopass:0.0.1
imagePullPolicy: Always
resources:
requests:
cpu: 50m
memory: 100Mi
limits:
cpu: 50m
memory: 100Mi
env:
# set TARGET_DIR env var and mount the same directory to to the container
- name: TARGET_DIR
value: "/etc/kubernetes/secrets-store-csi-providers"
volumeMounts:
- mountPath: "/etc/kubernetes/secrets-store-csi-providers"
name: providervol
volumes:
- name: providervol
hostPath:
path: "/etc/kubernetes/secrets-store-csi-providers"
nodeSelector:
beta.kubernetes.io/os: linux