53 lines
1.8 KiB
Smarty
53 lines
1.8 KiB
Smarty
{{/* Define the worker container */}}
|
|
{{- define "authentik.worker" -}}
|
|
image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
|
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
|
securityContext:
|
|
runAsUser: {{ .Values.podSecurityContext.runAsUser }}
|
|
runAsGroup: {{ .Values.podSecurityContext.runAsGroup }}
|
|
readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
|
|
runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
|
|
args: ["worker"]
|
|
envFrom:
|
|
- secretRef:
|
|
name: '{{ include "tc.common.names.fullname" . }}-authentik-secret'
|
|
- configMapRef:
|
|
name: '{{ include "tc.common.names.fullname" . }}-authentik-config'
|
|
volumeMounts:
|
|
- name: media
|
|
mountPath: "/media"
|
|
- name: templates
|
|
mountPath: "/templates"
|
|
- name: certs
|
|
mountPath: "/certs"
|
|
- name: geoip
|
|
mountPath: "/geoip"
|
|
readinessProbe:
|
|
exec:
|
|
command:
|
|
- /lifecycle/ak
|
|
- healthcheck
|
|
initialDelaySeconds: {{ .Values.probes.readiness.spec.initialDelaySeconds }}
|
|
timeoutSeconds: {{ .Values.probes.readiness.spec.timeoutSeconds }}
|
|
periodSeconds: {{ .Values.probes.readiness.spec.periodSeconds }}
|
|
failureThreshold: {{ .Values.probes.readiness.spec.failureThreshold }}
|
|
livenessProbe:
|
|
exec:
|
|
command:
|
|
- /lifecycle/ak
|
|
- healthcheck
|
|
initialDelaySeconds: {{ .Values.probes.liveness.spec.initialDelaySeconds }}
|
|
timeoutSeconds: {{ .Values.probes.liveness.spec.timeoutSeconds }}
|
|
periodSeconds: {{ .Values.probes.liveness.spec.periodSeconds }}
|
|
failureThreshold: {{ .Values.probes.liveness.spec.failureThreshold }}
|
|
startupProbe:
|
|
exec:
|
|
command:
|
|
- /lifecycle/ak
|
|
- healthcheck
|
|
initialDelaySeconds: {{ .Values.probes.startup.spec.initialDelaySeconds }}
|
|
timeoutSeconds: 10
|
|
periodSeconds: {{ .Values.probes.startup.spec.periodSeconds }}
|
|
failureThreshold: {{ .Values.probes.startup.spec.failureThreshold }}
|
|
{{- end -}}
|