mirror of
https://github.com/intel/intel-device-plugins-for-kubernetes.git
synced 2025-06-03 03:59:37 +00:00
5fe8174077
- Add script/fpga-plugin-prepare-for-kustomization.sh, creates contents for the secret needed by the fpga plugin webhook. - Single-command fpga plugin + webhook deployment for both modes: - `kubectl create -k deployments/fpga_plugin/overlays/af` - `kubectl create -k deployments/fpga_plugin/overlays/region` - Change intel-fpga-plugin image CMD to ENTRYPOINT.
42 lines
1.1 KiB
YAML
42 lines
1.1 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: intel-fpga-webhook-deployment
|
|
labels:
|
|
app: intel-fpga-webhook
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: intel-fpga-webhook
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: intel-fpga-webhook
|
|
spec:
|
|
containers:
|
|
- name: fpga-mutator
|
|
image: intel/intel-fpga-admissionwebhook:devel
|
|
imagePullPolicy: IfNotPresent
|
|
ports:
|
|
- containerPort: 8443
|
|
name: webhook-api
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 3210
|
|
runAsGroup: 3210
|
|
readOnlyRootFilesystem: true
|
|
args:
|
|
- -tls-cert-file=/etc/webhook/certs/cert.pem
|
|
- -tls-private-key-file=/etc/webhook/certs/key.pem
|
|
- -mode=preprogrammed
|
|
- -debug
|
|
volumeMounts:
|
|
- name: webhook-certs
|
|
mountPath: /etc/webhook/certs
|
|
readOnly: true
|
|
volumes:
|
|
- name: webhook-certs
|
|
secret:
|
|
secretName: intel-fpga-webhook-certs
|