hasadna-k8s/apps/cluster-admin/templates/atlantis-deployment.yaml at d0ebee9348ee9874b9221822dc406515fa88b1f3 · hasadna/hasadna-k8s · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
apiVersion: apps/v1
kind: Deployment
metadata:
  name: atlantis
spec:
  selector:
    matchLabels:
      app: atlantis
  replicas: 1
  revisionHistoryLimit: 2
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: atlantis
    spec:
      terminationGracePeriodSeconds: 10
      securityContext:
        fsGroup: 1000
      containers:
        - name: atlantis
          image: ghcr.io/hasadna/hasadna-iac/atlantis:latest
          imagePullPolicy: Always
          resources: {{ toYaml .Values.atlantis.resources | nindent 12 }}
          args:
            - server
            - --atlantis-url=https://atlantis.hasadna.org.il
            - --gh-token=$(GITHUB_TOKEN)
            - --gh-user=$(GITHUB_USER)
            - --gh-webhook-secret=$(GITHUB_WEBHOOK_SECRET)
            - --repo-allowlist=github.com/hasadna/hasadna-iac-atlantis
            - --web-basic-auth
            - --web-username=$(WEB_USERNAME)
            - --web-password=$(WEB_PASSWORD)
            - --port=4141
            - --repo-config=/home/atlantis/config/repos.yaml
          env:
            - name: VAULT_ADDR
              valueFrom:
                secretKeyRef:
                  name: atlantis-vault-creds
                  key: ADDR
            - name: VAULT_ROLE_ID
              valueFrom:
                secretKeyRef:
                  name: atlantis-vault-creds
                  key: ROLE_ID
            - name: VAULT_SECRET_ID
              valueFrom:
                secretKeyRef:
                  name: atlantis-vault-creds
                  key: SECRET_ID
          envFrom:
            - secretRef:
                name: atlantis-env
          volumeMounts:
            - name: data
              mountPath: /home/atlantis/.atlantis
            - name: config
              mountPath: /home/atlantis/config
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: atlantis-data
        - name: config
          configMap:
            name: atlantis