apiVersion: v1 kind: ServiceAccount metadata: name: armory-agent-service-account namespace: armory-agent --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding metadata: name: armory-agent-role-binding roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-admin subjects: - kind: ServiceAccount name: armory-agent-service-account namespace: armory-agent --- apiVersion: v1 data: armory-agent.yaml: | # More options at https://docs.armory.io/dcos/installation/armory-agent/plugin-options #kubernetes: # accounts: # - name: # serviceAccount: true # metrics: true clouddriver: # grpc: clouddriver.or.grpcproxy.hostname:9091 # Set to true if Agent plugin is not set up on TLS # insecure: true server: port: 8082 prometheus: enabled: true # port: 8008 kind: ConfigMap metadata: name: agent-config-fm58ghf8cf namespace: armory-agent --- apiVersion: v1 data: {} kind: Secret metadata: name: kubeconfigs-secret-46f8b28mk5 namespace: armory-agent type: Opaque --- apiVersion: v1 kind: Service metadata: labels: app: armory-agent name: armory-agent-metrics namespace: armory-agent spec: ports: - name: metrics port: 8008 protocol: TCP targetPort: metrics selector: app: armory-agent --- apiVersion: apps/v1 kind: Deployment metadata: labels: app: armory-agent app.kubernetes.io/name: armory-agent name: armory-agent namespace: armory-agent spec: replicas: 1 selector: matchLabels: app: armory-agent template: metadata: labels: app: armory-agent app.kubernetes.io/name: armory-agent spec: containers: - image: armory/agent-k8s:1.0.13-rc.1 imagePullPolicy: IfNotPresent name: agent ports: - containerPort: 8082 name: health protocol: TCP - containerPort: 8008 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /health port: health periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /opt/armory/config name: volume-agent-config - mountPath: /kubeconfigfiles name: volume-agent-kubeconfigs restartPolicy: Always serviceAccountName: armory-agent-service-account volumes: - configMap: name: agent-config-fm58ghf8cf name: volume-agent-config - name: volume-agent-kubeconfigs secret: defaultMode: 420 secretName: kubeconfigs-secret-46f8b28mk5