helm-charts/step-certificates/templates/bootstrap.yaml at 99ec81eca49e6d8a516050cc13ac6d48a6c63a94 · smallstep/helm-charts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
{{- if .Release.IsInstall -}}
apiVersion: v1
kind: ServiceAccount
metadata:
  name: {{ include "step-certificates.fullname" . }}-config
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "step-certificates.labels" . | nindent 4 }}
---
{{- if and .Values.bootstrap.enabled (not ( or .Values.inject.enabled  .Values.existingSecrets.enabled)) -}}
apiVersion: batch/v1
kind: Job
metadata:
  name: "{{ .Release.Name }}"
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "step-certificates.labels" . | nindent 4 }}
spec:
  template:
    metadata:
      name: "{{ .Release.Name }}"
      labels:
        app.kubernetes.io/name: {{ include "step-certificates.name" . }}
        app.kubernetes.io/instance: {{ .Release.Name }}
        {{- with .Values.global.labels }}
        {{- toYaml . | nindent 8 }}
        {{- end }}
    spec:
      serviceAccountName: {{ include "step-certificates.fullname" . }}-config
      restartPolicy: Never
      volumes:
      - name: bootstrap
        configMap:
          name: {{ include "step-certificates.fullname" . }}-bootstrap
      containers:
      - name: config
        image: "{{ .Values.bootstrap.image.repository }}:{{ .Values.bootstrap.image.tag }}"
        imagePullPolicy: {{ .Values.bootstrap.image.pullPolicy }}
        command: ["/bin/sh", "/home/step/bootstrap/bootstrap.sh"]
        volumeMounts:
          - name: bootstrap
            mountPath: /home/step/bootstrap
            readOnly: true
        {{- with .Values.bootstrap.containerSecurityContext }}
        securityContext:
          {{- toYaml . | nindent 10 }}
        {{- end }}
      {{- with .Values.podSecurityContext }}
      securityContext:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- if .Values.bootstrap.image.imagePullSecrets }}
      imagePullSecrets:
      {{- range .Values.bootstrap.image.imagePullSecrets }}
        - name: {{ . }}
      {{- end }}
      {{- end }}
{{- end }}
{{- end }}