31 lines
872 B
YAML
31 lines
872 B
YAML
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||
|
|
kind: Kustomization
|
||
|
|
resources:
|
||
|
|
- namespace.yaml
|
||
|
|
- crd.yaml
|
||
|
|
- rbac.yaml
|
||
|
|
- secrets.yaml
|
||
|
|
- server.yaml
|
||
|
|
- network-policy.yaml
|
||
|
|
labels:
|
||
|
|
- pairs:
|
||
|
|
app.kubernetes.io/name: layshaft
|
||
|
|
app.kubernetes.io/instance: layshaft
|
||
|
|
configMapGenerator:
|
||
|
|
- name: settings
|
||
|
|
namespace: layshaft
|
||
|
|
literals:
|
||
|
|
- KUBE_URL=https://kubernetes.default.svc.cluster.local:443
|
||
|
|
- KUBE_CA=/ca/kube/ca.crt
|
||
|
|
- KUBE_JWT_FILE=/auth/kube/token
|
||
|
|
- NAMESPACE=layshaft
|
||
|
|
- VAULT_URL=https://vault-active.vault.svc.cluster.local:8200
|
||
|
|
- VAULT_CA=/ca/vault/ca.crt
|
||
|
|
- VAULT_MOUNT=layshaft
|
||
|
|
- VAULT_AUTH_MOUNT=kubernetes
|
||
|
|
- VAULT_ROLE=layshaft
|
||
|
|
- VAULT_JWT_FILE=/auth/vault/token
|
||
|
|
- TLS_KEY_PATH=server
|
||
|
|
- TLS_STATE_NAME=server
|
||
|
|
- TLS_PERIOD_SECONDS=86400
|
||
|
|
- LISTEN_PORT=8443
|