1 # Copyright (C) 2021 The Nordix Foundation. All rights reserved.
2 # Copyright (c) 2019 Intel Corporation
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
8 # http:#www.apache.org/licenses/LICENSE-2.0
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
20 app: network-resources-injector
21 name: network-resources-injector
22 namespace: kube-system
24 serviceAccount: network-resources-injector-sa
26 - name: webhook-server
27 image: network-resources-injector:latest
28 imagePullPolicy: IfNotPresent
32 - -bind-address=0.0.0.0
34 - -tls-private-key-file=/etc/tls/tls.key
35 - -tls-cert-file=/etc/tls/tls.crt
42 fieldPath: metadata.namespace
49 add: ["NET_BIND_SERVICE"]
50 readOnlyRootFilesystem: true
51 allowPrivilegeEscalation: false
64 image: network-resources-injector:latest
65 imagePullPolicy: IfNotPresent
69 - -name=network-resources-injector
70 - -namespace=kube-system
82 # For third-party certificate, use secret resource
83 # instead of self-generated one from installer as below:
85 # 1) Remove initContainers from Pod spec.
86 # 2) Replace `emptyDir: {}` with below config
89 # secretName: network-resources-injector-secret