Documentation ¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
View Source
var DefaultDeployment = defaultConfig{ AuditReplicas: int32(1), WebhookReplicas: int32(3), Affinity: &corev1.Affinity{ PodAntiAffinity: &corev1.PodAntiAffinity{ PreferredDuringSchedulingIgnoredDuringExecution: []corev1.WeightedPodAffinityTerm{ { Weight: 100, PodAffinityTerm: corev1.PodAffinityTerm{ LabelSelector: &metav1.LabelSelector{ MatchExpressions: []metav1.LabelSelectorRequirement{ { Key: "gatekeeper.sh/operation", Operator: metav1.LabelSelectorOpIn, Values: []string{ "webhook", }, }, }, }, TopologyKey: "kubernetes.io/hostname", }, }, }, }, }, NodeSelector: map[string]string{ "kubernetes.io/os": "linux", }, PodAnnotations: map[string]string{ "container.seccomp.security.alpha.kubernetes.io/manager": "runtime/default", }, Resources: &corev1.ResourceRequirements{ Limits: corev1.ResourceList{ corev1.ResourceCPU: resource.MustParse("1000m"), corev1.ResourceMemory: resource.MustParse("512Mi"), }, Requests: corev1.ResourceList{ corev1.ResourceCPU: resource.MustParse("100m"), corev1.ResourceMemory: resource.MustParse("256Mi"), }, }, FailurePolicy: admregv1.Ignore, NamespaceSelector: &metav1.LabelSelector{ MatchExpressions: []metav1.LabelSelectorRequirement{ { Key: "admission.gatekeeper.sh/ignore", Operator: metav1.LabelSelectorOpDoesNotExist, }, }, }, }
DefaultDeployment is the expected default configuration to be deployed
Functions ¶
This section is empty.
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.