models-as-a-service/deployment/base/maas-controller/manager/manager.yaml at f4078fbb27a897362362dbc7fb4ae0b45273d72f · jrhyness/models-as-a-service · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
# Default namespace: opendatahub (ODH overlay). Override via kustomize.
# MAAS_API_NAMESPACE uses the pod's namespace (downward API) so maas-api is assumed
# to run in the same namespace as maas-controller.
apiVersion: apps/v1
kind: Deployment
metadata:
  name: maas-controller
  namespace: opendatahub
  labels:
    control-plane: maas-controller
    app: maas-controller
spec:
  selector:
    matchLabels:
      control-plane: maas-controller
  replicas: 1
  template:
    metadata:
      labels:
        control-plane: maas-controller
        app: maas-controller
    spec:
      securityContext:
        runAsNonRoot: true
      containers:
      - command:
        - /manager
        args:
          - --leader-elect
          - --health-probe-bind-address=:8081
          - --gateway-name=$(GATEWAY_NAME)
          - --gateway-namespace=$(GATEWAY_NAMESPACE)
          - --maas-api-namespace=$(MAAS_API_NAMESPACE)
          - --maas-subscription-namespace=$(MAAS_SUBSCRIPTION_NAMESPACE)
          - --cluster-audience=$(CLUSTER_AUDIENCE)
          - --metadata-cache-ttl=$(METADATA_CACHE_TTL)
          - --authz-cache-ttl=$(AUTHZ_CACHE_TTL)
        env:
          - name: GATEWAY_NAME
            value: "maas-default-gateway"
          - name: GATEWAY_NAMESPACE
            value: "openshift-ingress"
          - name: MAAS_API_NAMESPACE
            valueFrom:
              fieldRef:
                fieldPath: metadata.namespace
          - name: MAAS_SUBSCRIPTION_NAMESPACE
            value: "models-as-a-service"
          - name: CLUSTER_AUDIENCE
            value: "https://kubernetes.default.svc"
          - name: METADATA_CACHE_TTL
            value: "60"
          - name: AUTHZ_CACHE_TTL
            value: "60"
        image: maas-controller
        name: manager
        imagePullPolicy: Always
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop: ["ALL"]
        livenessProbe:
          httpGet:
            path: /healthz
            port: 8081
          initialDelaySeconds: 15
          periodSeconds: 20
        readinessProbe:
          httpGet:
            path: /readyz
            port: 8081
          initialDelaySeconds: 5
          periodSeconds: 10
        resources:
          limits:
            cpu: 500m
            memory: 512Mi
          requests:
            cpu: 10m
            memory: 64Mi
      serviceAccountName: maas-controller
      terminationGracePeriodSeconds: 10