Skip to content
Snippets Groups Projects
Unverified Commit f9622a5b authored by leigh capili's avatar leigh capili
Browse files

Add /kbin/kubectl to _base integrations


Signed-off-by: default avatarleigh capili <leigh@null.net>
parent 3a74fcd7
No related branches found
No related tags found
No related merge requests found
apiVersion: apps/v1
kind: Deployment
metadata:
name: credentials-sync-eventhub
namespace: flux-system
spec:
template:
spec:
initContainers:
- image: bitnami/kubectl
securityContext:
privileged: false
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
name: copy-kubectl
# it's okay to do this because kubectl is a statically linked binary
command:
- sh
- -ceu
- cp $(which kubectl) /kbin/
resources: {}
volumeMounts:
- name: kbin
mountPath: /kbin
containers:
- name: sync
volumeMounts:
- name: kbin
mountPath: /kbin
volumes:
- name: kbin
emptyDir: {}
...@@ -7,6 +7,9 @@ commonLabels: ...@@ -7,6 +7,9 @@ commonLabels:
resources: resources:
- sync.yaml - sync.yaml
patchesStrategicMerge:
- kubectl-patch.yaml
vars: vars:
- name: KUBE_SECRET - name: KUBE_SECRET
objref: objref:
......
apiVersion: batch/v1beta1
kind: CronJob
metadata:
name: credentials-sync-eventhub
namespace: flux-system
spec:
jobTemplate:
spec:
template:
spec:
initContainers:
- image: bitnami/kubectl
name: copy-kubectl
# it's okay to do this because kubectl is a statically linked binary
command:
- sh
- -ceu
- cp $(which kubectl) /kbin/
resources: {}
volumeMounts:
- name: kbin
mountPath: /kbin
containers:
- name: sync
volumeMounts:
- name: kbin
mountPath: /kbin
volumes:
- name: kbin
emptyDir: {}
...@@ -7,6 +7,9 @@ commonLabels: ...@@ -7,6 +7,9 @@ commonLabels:
resources: resources:
- sync.yaml - sync.yaml
patchesStrategicMerge:
- kubectl-patch.yaml
vars: vars:
- name: KUBE_SECRET - name: KUBE_SECRET
objref: objref:
......
apiVersion: apps/v1
kind: Deployment
metadata:
name: credentials-sync
namespace: flux-system
spec:
template:
spec:
initContainers:
- image: bitnami/kubectl
name: copy-kubectl
# it's okay to do this because kubectl is a statically linked binary
command:
- sh
- -ceu
- cp $(which kubectl) /kbin/
resources: {}
volumeMounts:
- name: kbin
mountPath: /kbin
containers:
- name: sync
volumeMounts:
- name: kbin
mountPath: /kbin
volumes:
- name: kbin
emptyDir: {}
...@@ -7,6 +7,9 @@ commonLabels: ...@@ -7,6 +7,9 @@ commonLabels:
resources: resources:
- sync.yaml - sync.yaml
patchesStrategicMerge:
- kubectl-patch.yaml
vars: vars:
- name: KUBE_SECRET - name: KUBE_SECRET
objref: objref:
......
apiVersion: batch/v1beta1
kind: CronJob
metadata:
name: credentials-sync
namespace: flux-system
spec:
jobTemplate:
spec:
template:
spec:
initContainers:
- image: bitnami/kubectl
name: copy-kubectl
# it's okay to do this because kubectl is a statically linked binary
command:
- sh
- -ceu
- cp $(which kubectl) /kbin/
resources: {}
volumeMounts:
- name: kbin
mountPath: /kbin
containers:
- name: sync
volumeMounts:
- name: kbin
mountPath: /kbin
volumes:
- name: kbin
emptyDir: {}
...@@ -7,6 +7,9 @@ commonLabels: ...@@ -7,6 +7,9 @@ commonLabels:
resources: resources:
- sync.yaml - sync.yaml
patchesStrategicMerge:
- kubectl-patch.yaml
vars: vars:
- name: KUBE_SECRET - name: KUBE_SECRET
objref: objref:
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment