apiVersion: v1 kind: ServiceAccount metadata: name: armory-agent-service-account namespace: armory-agent --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding metadata: name: armory-agent-role-binding roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-admin subjects: - kind: ServiceAccount name: armory-agent-service-account namespace: armory-agent --- apiVersion: v1 data: kubesvc.yaml: | # More options at https://docs.armory.io/dcos/installation/armory-agent/plugin-options #kubernetes: # accounts: # - name: # serviceAccount: true # metrics: true clouddriver: # grpc: clouddriver.or.grpcproxy.hostname:9091 # Set to true if Agent plugin is not set up on TLS # insecure: true server: port: 8082 prometheus: enabled: true # port: 8008 kind: ConfigMap metadata: name: kubesvc-config-gm2gk2c9hg namespace: armory-agent --- apiVersion: v1 kind: Service metadata: labels: app: spin cluster: spin-kubesvc name: kubesvc-metrics namespace: armory-agent spec: ports: - name: metrics port: 8008 protocol: TCP targetPort: metrics selector: app: spin cluster: spin-kubesvc --- apiVersion: apps/v1 kind: Deployment metadata: labels: app: spin app.kubernetes.io/name: kubesvc app.kubernetes.io/part-of: spinnaker cluster: spin-kubesvc name: spin-kubesvc namespace: armory-agent spec: replicas: 1 selector: matchLabels: app: spin cluster: spin-kubesvc template: metadata: labels: app: spin app.kubernetes.io/name: kubesvc app.kubernetes.io/part-of: spinnaker cluster: spin-kubesvc spec: containers: - image: armory/kubesvc:0.3.1-rc.1 imagePullPolicy: IfNotPresent name: kubesvc ports: - containerPort: 8082 name: health protocol: TCP - containerPort: 8008 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /health port: health periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /opt/spinnaker/config name: volume-kubesvc-config - mountPath: /kubeconfigfiles name: volume-kubesvc-kubeconfigs restartPolicy: Always serviceAccountName: armory-agent-service-account volumes: - configMap: name: kubesvc-config-gm2gk2c9hg name: volume-kubesvc-config - name: volume-kubesvc-kubeconfigs secret: defaultMode: 420 secretName: kubeconfigs-secret