mirror of
https://github.com/fluxcd/flux2.git
synced 2026-02-16 12:41:49 +00:00
0404790df9
To use JWT to communicate with Azure eventhub we need to renew the JWT credentials from time to time. This example yaml helps out with that * Supports both deployment and cronjob based renewal * static service principal * aad-pod-identity in azure Signed-off-by: Edvin Norling <edvin.norling@xenit.se>
32 lines
817 B
YAML
32 lines
817 B
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: credentials-sync-eventhub
|
|
namespace: flux-system
|
|
spec:
|
|
template:
|
|
spec:
|
|
initContainers:
|
|
- image: bitnami/kubectl
|
|
securityContext:
|
|
privileged: false
|
|
readOnlyRootFilesystem: true
|
|
allowPrivilegeEscalation: false
|
|
name: copy-kubectl
|
|
# it's okay to do this because kubectl is a statically linked binary
|
|
command:
|
|
- sh
|
|
- -ceu
|
|
- cp $(which kubectl) /kbin/
|
|
resources: {}
|
|
volumeMounts:
|
|
- name: kbin
|
|
mountPath: /kbin
|
|
containers:
|
|
- name: sync
|
|
volumeMounts:
|
|
- name: kbin
|
|
mountPath: /kbin
|
|
volumes:
|
|
- name: kbin
|
|
emptyDir: {}
|