gitea-bot
93691cf720
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. ### Details - **Trigger**: `pull_request` by `@alexlebens` - **Commit**: `91c2800` (on `91c2800de2bff6f0e5132b767391c4871712e525`) - **Charts Updated**: `houndarr,immich,intel-device-plugin` ### Update Details (2026-04-02 00:53 UTC) - **Trigger**: `pull_request` by `@alexlebens` - **Commit**: `201eac7` (on `201eac78a4966703d139718722c52a08d06a23fd`) - **Charts Updated**: `gitea,immich,jellyfin,jellystat,karakeep` Reviewed-on: #5396 Co-authored-by: gitea-bot <gitea-bot@alexlebens.net> Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
78 lines
2.2 KiB
YAML
78 lines
2.2 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
control-plane: controller-manager
|
|
name: inteldeviceplugins-controller-manager
|
|
namespace: "intel-device-plugin"
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
control-plane: controller-manager
|
|
template:
|
|
metadata:
|
|
labels:
|
|
control-plane: controller-manager
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- "--metrics-bind-address=:8443"
|
|
- "--metrics-secure"
|
|
- "--health-probe-bind-address=:8081"
|
|
- "--leader-elect"
|
|
env:
|
|
- name: DEVICEPLUGIN_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
image: "intel/intel-deviceplugin-operator:0.35.0@sha256:d7eeac081bd17e58d8d4d542f3cb33d67cc1bdab314b09ad591e8eacb51dd5ec"
|
|
imagePullPolicy: IfNotPresent
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: 8081
|
|
initialDelaySeconds: 15
|
|
periodSeconds: 20
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /readyz
|
|
port: 8081
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
name: manager
|
|
ports:
|
|
- containerPort: 9443
|
|
name: webhook-server
|
|
protocol: TCP
|
|
resources:
|
|
limits: {}
|
|
requests:
|
|
cpu: 10m
|
|
memory: 50Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
volumeMounts:
|
|
- mountPath: /tmp/k8s-webhook-server/serving-certs
|
|
name: cert
|
|
readOnly: true
|
|
nodeSelector:
|
|
kubernetes.io/arch: amd64
|
|
serviceAccountName: default
|
|
terminationGracePeriodSeconds: 10
|
|
volumes:
|
|
- name: cert
|
|
secret:
|
|
defaultMode: 420
|
|
secretName: webhook-server-cert
|
|
tolerations: []
|