mirror of
https://github.com/h44z/wg-portal
synced 2025-02-26 05:49:14 +00:00
* Initial chart version * Add CI/CD for chart * Fix admin creds template * Add command, args, env, envFrom * Render volumes and volumeMounts with tpl * Change persistance accessMode type * Add update strategy config * Use custom types in docs * Add startup probe config * Fix web.external_url config
112 lines
3.5 KiB
Smarty
112 lines
3.5 KiB
Smarty
{{- define "wg-portal.podTemplate" -}}
|
|
metadata:
|
|
annotations:
|
|
checksum/config: {{ include (print $.Template.BasePath "/secret.yaml") . | sha256sum }}
|
|
kubectl.kubernetes.io/default-container: {{ .Chart.Name }}
|
|
{{- with .Values.podAnnotations }}
|
|
{{- tpl (toYaml .) $ | nindent 4 }}
|
|
{{- end }}
|
|
labels:
|
|
{{- include "wg-portal.labels" . | nindent 4 }}
|
|
{{- with .Values.podLabels }}
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
spec:
|
|
{{- with .Values.affinity }}
|
|
affinity: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
|
|
containers:
|
|
{{- with .Values.sidecarContainers }}
|
|
{{- tpl (toYaml .) $ | nindent 4 }}
|
|
{{- end }}
|
|
- name: {{ .Chart.Name }}
|
|
image: "{{ .Values.image.repository }}:{{ default .Chart.AppVersion .Values.image.tag}}"
|
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
|
{{- with .Values.command }}
|
|
command: {{ . }}
|
|
{{- end }}
|
|
{{- with .Values.args }}
|
|
args: {{ . }}
|
|
{{- end }}
|
|
{{- with .Values.env }}
|
|
env: {{- tpl (toYaml .) $ | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.envFrom }}
|
|
envFrom: {{- tpl (toYaml .) $ | nindent 8 }}
|
|
{{- end }}
|
|
ports:
|
|
- name: http
|
|
containerPort: {{ .Values.service.web.port }}
|
|
protocol: TCP
|
|
{{- range $index, $port := .Values.service.wireguard.ports }}
|
|
- name: wg{{ $index }}
|
|
containerPort: {{ $port }}
|
|
protocol: UDP
|
|
{{- end }}
|
|
{{- with .Values.livenessProbe }}
|
|
livenessProbe: {{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.readinessProbe }}
|
|
readinessProbe: {{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.startupProbe }}
|
|
startupProbe: {{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.securityContext }}
|
|
securityContext: {{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.resources}}
|
|
resources: {{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /app/config
|
|
readOnly: true
|
|
- name: data
|
|
mountPath: /app/data
|
|
{{- with .Values.volumeMounts }}
|
|
{{- tpl (toYaml .) $ | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.dnsPolicy }}
|
|
dnsPolicy: {{ . }}
|
|
{{- end }}
|
|
{{- with .Values.hostNetwork }}
|
|
hostNetwork: {{ . }}
|
|
{{- end }}
|
|
{{- with .Values.imagePullSecrets }}
|
|
imagePullSecrets: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.initContainers }}
|
|
initContainers: {{- tpl (toYaml .) $ | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.nodeSelector }}
|
|
nodeSelector: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.restartPolicy }}
|
|
restartPolicy: {{ . }}
|
|
{{- end }}
|
|
serviceAccountName: {{ include "wg-portal.serviceAccountName" . }}
|
|
{{- with .Values.podSecurityContext }}
|
|
securityContext: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
{{- with .Values.tolerations }}
|
|
tolerations: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
volumes:
|
|
- name: config
|
|
secret:
|
|
secretName: {{ include "wg-portal.fullname" . }}
|
|
{{- if not .Values.persistence.enabled }}
|
|
- name: data
|
|
emptyDir: {}
|
|
{{- else if eq .Values.workloadType "Deployment" }}
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: {{ include "wg-portal.fullname" . }}
|
|
{{- end }}
|
|
{{- with .Values.volumes }}
|
|
{{- tpl (toYaml .) $ | nindent 4 }}
|
|
{{- end }}
|
|
{{- end -}}
|