mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-02-18 13:54:23 -05:00

Bumping Cilium to also enable node-to-node encryption and node-to-node strict mode. Since the second is not upstream we use our fork.
44 lines
1.4 KiB
YAML
44 lines
1.4 KiB
YAML
{{- $kvstoreMetricsEnabled := and .Values.clustermesh.apiserver.kvstoremesh.enabled .Values.clustermesh.apiserver.metrics.kvstoremesh.enabled -}}
|
|
{{- if and
|
|
(or .Values.externalWorkloads.enabled .Values.clustermesh.useAPIServer)
|
|
(or .Values.clustermesh.apiserver.metrics.enabled $kvstoreMetricsEnabled .Values.clustermesh.apiserver.metrics.etcd.enabled) }}
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: clustermesh-apiserver-metrics
|
|
namespace: {{ .Release.Namespace }}
|
|
{{- with .Values.clustermesh.annotations }}
|
|
annotations:
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
labels:
|
|
k8s-app: clustermesh-apiserver
|
|
app.kubernetes.io/part-of: cilium
|
|
app.kubernetes.io/name: clustermesh-apiserver
|
|
app.kubernetes.io/component: metrics
|
|
spec:
|
|
clusterIP: None
|
|
type: ClusterIP
|
|
ports:
|
|
{{- if .Values.clustermesh.apiserver.metrics.enabled }}
|
|
- name: apiserv-metrics
|
|
port: {{ .Values.clustermesh.apiserver.metrics.port }}
|
|
protocol: TCP
|
|
targetPort: apiserv-metrics
|
|
{{- end }}
|
|
{{- if $kvstoreMetricsEnabled }}
|
|
- name: kvmesh-metrics
|
|
port: {{ .Values.clustermesh.apiserver.metrics.kvstoremesh.port }}
|
|
protocol: TCP
|
|
targetPort: kvmesh-metrics
|
|
{{- end }}
|
|
{{- if .Values.clustermesh.apiserver.metrics.etcd.enabled }}
|
|
- name: etcd-metrics
|
|
port: {{ .Values.clustermesh.apiserver.metrics.etcd.port }}
|
|
protocol: TCP
|
|
targetPort: etcd-metrics
|
|
{{- end }}
|
|
selector:
|
|
k8s-app: clustermesh-apiserver
|
|
{{- end }}
|