2019-10-11 17:20:52 +00:00
|
|
|
apiVersion: apps/v1
|
|
|
|
kind: Deployment
|
|
|
|
metadata:
|
|
|
|
labels:
|
|
|
|
app: buildkitd
|
|
|
|
name: buildkitd
|
|
|
|
spec:
|
|
|
|
replicas: 1
|
|
|
|
selector:
|
|
|
|
matchLabels:
|
|
|
|
app: buildkitd
|
|
|
|
template:
|
|
|
|
metadata:
|
|
|
|
labels:
|
|
|
|
app: buildkitd
|
|
|
|
spec:
|
|
|
|
containers:
|
2020-11-22 17:10:34 +00:00
|
|
|
- name: buildkitd
|
|
|
|
image: moby/buildkit:master
|
|
|
|
args:
|
|
|
|
- --addr
|
|
|
|
- unix:///run/buildkit/buildkitd.sock
|
|
|
|
- --addr
|
|
|
|
- tcp://0.0.0.0:1234
|
|
|
|
- --tlscacert
|
|
|
|
- /certs/ca.pem
|
|
|
|
- --tlscert
|
|
|
|
- /certs/cert.pem
|
|
|
|
- --tlskey
|
|
|
|
- /certs/key.pem
|
|
|
|
# the probe below will only work after Release v0.6.3
|
|
|
|
readinessProbe:
|
|
|
|
exec:
|
|
|
|
command:
|
|
|
|
- buildctl
|
|
|
|
- debug
|
|
|
|
- workers
|
|
|
|
initialDelaySeconds: 5
|
|
|
|
periodSeconds: 30
|
|
|
|
# the probe below will only work after Release v0.6.3
|
|
|
|
livenessProbe:
|
|
|
|
exec:
|
|
|
|
command:
|
|
|
|
- buildctl
|
|
|
|
- debug
|
|
|
|
- workers
|
|
|
|
initialDelaySeconds: 5
|
|
|
|
periodSeconds: 30
|
|
|
|
securityContext:
|
|
|
|
privileged: true
|
|
|
|
ports:
|
|
|
|
- containerPort: 1234
|
|
|
|
volumeMounts:
|
|
|
|
- name: certs
|
|
|
|
readOnly: true
|
|
|
|
mountPath: /certs
|
2019-10-11 17:20:52 +00:00
|
|
|
volumes:
|
2020-11-22 17:10:34 +00:00
|
|
|
# buildkit-daemon-certs must contain ca.pem, cert.pem, and key.pem
|
|
|
|
- name: certs
|
|
|
|
secret:
|
|
|
|
secretName: buildkit-daemon-certs
|
2019-10-11 17:20:52 +00:00
|
|
|
---
|
|
|
|
apiVersion: v1
|
|
|
|
kind: Service
|
|
|
|
metadata:
|
|
|
|
labels:
|
|
|
|
app: buildkitd
|
|
|
|
name: buildkitd
|
|
|
|
spec:
|
|
|
|
ports:
|
2020-11-22 17:10:34 +00:00
|
|
|
- port: 1234
|
|
|
|
protocol: TCP
|
2019-10-11 17:20:52 +00:00
|
|
|
selector:
|
|
|
|
app: buildkitd
|