openstack-helm/nova/templates/deployment-api-metadata.yaml
Alan Meadows 88a85ae7d5 Implement requested feedback in PR#91
- Split out osapi and metadata api to remove unnecessary security privileges

- Prune dependencies

- Fix static imagePullPolicies

- Remove extraneous start.sh imported accidently from keystone chart
2017-01-09 07:49:44 -08:00

69 lines
2.1 KiB
YAML

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: nova-api
spec:
replicas: {{ .Values.control_replicas }}
template:
metadata:
labels:
app: nova-api
annotations:
pod.beta.kubernetes.io/init-containers: '[
{
"name": "init",
"image": "{{ .Values.image.entrypoint }}",
"imagePullPolicy": "{{ .Values.image.pull_policy }}",
"env": [
{
"name": "NAMESPACE",
"value": "{{ .Release.Namespace }}"
},
{
"name": "INTERFACE_NAME",
"value": "eth0"
},
{
"name": "DEPENDENCY_SERVICE",
"value": "{{ include "joinListWithColon" .Values.dependencies.api.service }}"
},
{
"name": "DEPENDENCY_JOBS",
"value": "{{ include "joinListWithColon" .Values.dependencies.api.jobs }}"
},
{
"name": "COMMAND",
"value": "echo done"
}
]
}
]'
spec:
nodeSelector:
{{ .Values.labels.control_node_selector_key }}: {{ .Values.labels.control_node_selector_value }}
containers:
- name: nova-api
image: {{ .Values.image.api }}
# https://bugs.launchpad.net/kolla-mesos/+bug/1546007
securityContext:
capabilities:
add:
- NET_ADMIN
command:
- nova-api-metadata --config-file=/etc/nova/nova.conf
ports:
- containerPort: {{ .Values.network.port.metadata }}
readinessProbe:
tcpSocket:
port: {{ .Values.network.port.osapi }}
volumeMounts:
- name: novaconf
mountPath: /etc/nova/nova.conf
subPath: nova.conf
volumes:
- name: novaconf
configMap:
name: nova-etc
items:
- key: nova.conf
path: nova.conf