forked from draios/sysdig-gcscc-connector
-
Notifications
You must be signed in to change notification settings - Fork 0
/
deployment.yaml
89 lines (89 loc) · 2.95 KB
/
deployment.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
---
kind: ConfigMap
apiVersion: v1
metadata:
name: sysdig-gcscc-connector
data:
org_id: "534901558763"
project_id: cscc544401558763
source_id: "534932342125324852345265233"
webhook_url: https://arboreal-logic-198306.appspot.com/events
---
kind: Secret
apiVersion: v1
metadata:
name: sysdig-gcscc-connector
type: Opaque
data:
sysdig_token: YzZmNmFmODYtOTNhNS00MThiLTlkNzYtMTIyOWZjZDkyMzc4Cg==
webhook_authentication_token: N2E3OTQxNmVkNGQzNzc2Yjc0ZmNjMDcwMjc1ZWNlMjA4ZWVlZjI5Zgo=
security_service_account_info: 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
---
kind: Deployment
apiVersion: extensions/v1beta1
metadata:
name: sysdig-gcscc-connector
labels:
name: sysdig-gcscc-connector-deployment
app: sysdig-gcscc-connector-app
spec:
replicas: 2
selector:
matchLabels:
name: sysdig-gcscc-connector
role: sysdig-gcscc-connector
app: sysdig-gcscc-connector-app
template:
spec:
containers:
- name: sysdig-gcscc-connector
image: sysdig/sysdig-gcscc-connector
# You can deploy instead the sysdig_secure_webhook
args: [ "falco_webhook" ]
ports:
- containerPort: 8080
protocol: TCP
env:
- name: SYSDIG_TOKEN
valueFrom:
secretKeyRef:
name: sysdig-gcscc-connector
key: sysdig_token
- name: ORG_ID
valueFrom:
configMapKeyRef:
name: sysdig-gcscc-connector
key: org_id
- name: SOURCE_ID
valueFrom:
configMapKeyRef:
name: sysdig-gcscc-connector
key: source_id
- name: SECURITY_SERVICE_ACCOUNT_INFO
valueFrom:
secretKeyRef:
name: sysdig-gcscc-connector
key: security_service_account_info
- name: WEBHOOK_AUTHENTICATION_TOKEN
valueFrom:
secretKeyRef:
name: sysdig-gcscc-connector
key: webhook_authentication_token
metadata:
labels:
name: sysdig-gcscc-connector
role: sysdig-gcscc-connector
app: sysdig-gcscc-connector-app
---
apiVersion: v1
kind: Service
metadata:
name: sysdig-gcscc-connector
spec:
ports:
- port: 8080
targetPort: 8080
selector:
name: sysdig-gcscc-connector
app: sysdig-gcscc-connector-app
role: sysdig-gcscc-connector