mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-02-12 23:14:47 -03:30
4a03d13d08
* [cilium] fix rbac and upgrade hubble v0.11.0 (#3) * [cilium] fix rbac for LB bgp ipam * [cilium] Upgrade Hubble to v0.11.0 and add mTLS between Hubble UI and Hubble Relay * fix dns domain hubble for tls --------- Co-authored-by: Thuon Jeremy <d107869@olinfra1.infra.bdm.outscale.c1.dav.fr> * Fix blank line --------- Co-authored-by: Thuon Jeremy <d107869@olinfra1.infra.bdm.outscale.c1.dav.fr>
35 lines
1.1 KiB
Django/Jinja
35 lines
1.1 KiB
Django/Jinja
---
|
|
# Source: cilium/templates/hubble-generate-certs-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: hubble-generate-certs
|
|
namespace: kube-system
|
|
labels:
|
|
k8s-app: hubble-generate-certs
|
|
spec:
|
|
template:
|
|
metadata:
|
|
labels:
|
|
k8s-app: hubble-generate-certs
|
|
spec:
|
|
serviceAccount: hubble-generate-certs
|
|
serviceAccountName: hubble-generate-certs
|
|
containers:
|
|
- name: certgen
|
|
image: "{{ cilium_hubble_certgen_image_repo }}:{{ cilium_hubble_certgen_image_tag }}"
|
|
imagePullPolicy: {{ k8s_image_pull_policy }}
|
|
command:
|
|
- "/usr/bin/cilium-certgen"
|
|
# Because this is executed as a job, we pass the values as command
|
|
# line args instead of via config map. This allows users to inspect
|
|
# the values used in past runs by inspecting the completed pod.
|
|
args:
|
|
{% for key, value in cilium_certgen_args.items() -%}
|
|
- "--{{ key }}={{ value }}"
|
|
{% endfor %}
|
|
|
|
hostNetwork: true
|
|
restartPolicy: OnFailure
|
|
ttlSecondsAfterFinished: 1800
|