controller.yaml

#@ load("@ytt:data", "data")

---
apiVersion: v1
kind: ConfigMap
metadata:
  name:  build-init-image
  namespace: kpack
data:
  image: #@ data.values.build_init.image
---
apiVersion: v1
kind: ConfigMap
metadata:
  name:  build-init-windows-image
  namespace: kpack
data:
  image: #@ data.values.build_init_windows.image
---
apiVersion: v1
kind: ConfigMap
metadata:
  name:  build-waiter-image
  namespace: kpack
data:
  image: #@ data.values.build_waiter.image
---
apiVersion: v1
kind: ConfigMap
metadata:
  name:  rebase-image
  namespace: kpack
data:
  image: #@ data.values.rebase.image
---
apiVersion: v1
kind: ConfigMap
metadata:
  name:  lifecycle-image
  namespace: kpack
data:
  image: #@ data.values.lifecycle.image
---
apiVersion: v1
kind: ConfigMap
metadata:
  name:  completion-image
  namespace: kpack
data:
  image: #@ data.values.completion.image
---
apiVersion: v1
kind: ConfigMap
metadata:
  name:  completion-windows-image
  namespace: kpack
data:
  image: #@ data.values.completion_windows.image
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: kpack-controller
  namespace: kpack
spec:
  replicas: 1
  selector:
    matchLabels:
      app: kpack-controller
  template:
    metadata:
      labels:
        app: kpack-controller
        version: #@ data.values.kpack_version
    spec:
      securityContext:
        runAsNonRoot: true
        seccompProfile:
          type: "RuntimeDefault"
      priorityClassName: kpack-control-plane
      serviceAccountName: controller
      nodeSelector:
        kubernetes.io/os: linux
      containers:
      - name: controller
        securityContext:
          runAsNonRoot: true
          allowPrivilegeEscalation: false
          privileged: false
          seccompProfile:
            type: "RuntimeDefault"
          capabilities:
            drop:
              - ALL
        image: #@ data.values.controller.image
        env:
        - name: ENABLE_PRIORITY_CLASSES
          value: "false"
        - name: INJECTED_SIDECAR_SUPPORT
          value: "false"
        - name: EXPERIMENTAL_GENERATE_SLSA_ATTESTATION
          value: "false"
        - name: INSECURE_SSH_TRUST_UNKNOWN_HOSTS
          value: "true"
        - name: CONFIG_LOGGING_NAME
          value: config-logging
        - name: CONFIG_OBSERVABILITY_NAME
          value: config-observability
        - name: METRICS_DOMAIN
          value: kpack.io
        - name: SCALING_FACTOR
          value: '1'
        - name: SYSTEM_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: SYSTEM_SERVICE_ACCOUNT
          value: controller
        - name: BUILD_INIT_IMAGE
          valueFrom:
            configMapKeyRef:
              name: build-init-image
              key: image
        - name: BUILD_INIT_WINDOWS_IMAGE
          valueFrom:
            configMapKeyRef:
              name: build-init-windows-image
              key: image
        - name: BUILD_WAITER_IMAGE
          valueFrom:
            configMapKeyRef:
              name: build-waiter-image
              key: image
        - name: REBASE_IMAGE
          valueFrom:
            configMapKeyRef:
              name: rebase-image
              key: image
        - name: COMPLETION_IMAGE
          valueFrom:
            configMapKeyRef:
              name: completion-image
              key: image
        - name: COMPLETION_WINDOWS_IMAGE
          valueFrom:
            configMapKeyRef:
              name: completion-windows-image
              key: image
        resources:
          requests:
            cpu: 20m
            memory: 1Gi
          limits:
            memory: 1Gi