deployment.yaml

{{- if .Values.flyteadmin.enabled }}
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ template "flyteadmin.name" . }}
  namespace: {{ template "flyte.namespace" . }}
  labels: {{ include "flyteadmin.labels" . | nindent 4 }}
spec:
  replicas: {{ .Values.flyteadmin.replicaCount }}
  selector:
    matchLabels: {{ include "flyteadmin.selectorLabels" . | nindent 6 }}
  template:
    metadata:
      annotations:
        configChecksum: {{ include (print .Template.BasePath "/admin/configmap.yaml") . | sha256sum | trunc 63 | quote }}
        {{- with .Values.flyteadmin.podAnnotations }}
        {{- toYaml . | nindent 8 }}
        {{- end }}
      labels: {{ include "flyteadmin.podLabels" . | nindent 8 }}
    spec:
      {{- with .Values.flyteadmin.securityContext }}
      securityContext: {{ tpl (toYaml .) $ | nindent 8 }}
      {{- end }}
      {{- if .Values.flyteadmin.priorityClassName }}
      priorityClassName: {{ .Values.flyteadmin.priorityClassName }}
      {{- end }}
      initContainers:
        - command:
          - flyteadmin
          - --config
          - {{ .Values.flyteadmin.configPath }}
          - migrate
          - run
          image: "{{ .Values.flyteadmin.image.repository }}:{{ .Values.flyteadmin.image.tag }}"
          imagePullPolicy: "{{ .Values.flyteadmin.image.pullPolicy }}"
          name: run-migrations
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop: ["ALL"]
          volumeMounts: {{- include "databaseSecret.volumeMount" . | nindent 10 }}
          - mountPath: /etc/flyte/config
            name: base-config-volume
          {{- if .Values.flyteadmin.env }}
          env:
            {{- with .Values.flyteadmin.env -}}
            {{- tpl (toYaml .) $ | nindent 12 }}
            {{- end }}
          {{- end }}
          {{- if .Values.flyteadmin.envFrom }}
          envFrom:
            {{- with .Values.flyteadmin.envFrom -}}
            {{- tpl (toYaml .) $ | nindent 12 }}
            {{- end }}
          {{- end }}
        {{- if .Values.flyteadmin.initialProjects }}
        - command:
          - flyteadmin
          - --config
          - {{ .Values.flyteadmin.configPath }}
          - migrate
          - seed-projects
          {{- range .Values.flyteadmin.initialProjects }}
          - {{ . }}
          {{- end }}
          image: "{{ .Values.flyteadmin.image.repository }}:{{ .Values.flyteadmin.image.tag }}"
          imagePullPolicy: "{{ .Values.flyteadmin.image.pullPolicy }}"
          name: seed-projects
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop: ["ALL"]
          volumeMounts: {{- include "databaseSecret.volumeMount" . | nindent 10 }}
          - mountPath: /etc/flyte/config
            name: base-config-volume
          {{- if .Values.flyteadmin.env }}
          env:
            {{- with .Values.flyteadmin.env -}}
            {{- tpl (toYaml .) $ | nindent 12 }}
            {{- end }}
            {{- end }}
        {{- end }}
        {{- if and (.Values.cluster_resource_manager.enabled) (not .Values.cluster_resource_manager.standalone_deploy) }}
        - command:
          - flyteadmin
          - --config
          - {{ .Values.flyteadmin.configPath }}
          - clusterresource
          - sync
          image: "{{ .Values.flyteadmin.image.repository }}:{{ .Values.flyteadmin.image.tag }}"
          imagePullPolicy: "{{ .Values.flyteadmin.image.pullPolicy }}"
          name: sync-cluster-resources
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop: ["ALL"]
          volumeMounts: {{- include "databaseSecret.volumeMount" . | nindent 10 }}
          - mountPath: /etc/flyte/clusterresource/templates
            name: resource-templates
          - mountPath: /etc/flyte/config
            name: clusters-config-volume
          - mountPath: /etc/secrets/
            name: admin-secrets
          {{- if gt (len .Values.configmap.clusters.labelClusterMap) 0 }}
          {{- with .Values.flyteadmin.additionalVolumeMounts -}}
          {{ tpl (toYaml .) $ | nindent 10 }}
          {{- end }}
          {{- end }}
          {{- if .Values.flyteadmin.env }}
          env:
            {{- with .Values.flyteadmin.env -}}
            {{- tpl (toYaml .) $ | nindent 12 }}
            {{- end }}
            {{- end }}
        {{- end }}
        - name: generate-secrets
          image: "{{ .Values.flyteadmin.image.repository }}:{{ .Values.flyteadmin.image.tag }}"
          imagePullPolicy: "{{ .Values.flyteadmin.image.pullPolicy }}"
          command: ["/bin/sh", "-c"]
          args:
            [
                "flyteadmin --config={{ .Values.flyteadmin.configPath }} secrets init --localPath /etc/scratch/secrets && flyteadmin --config=/etc/flyte/config/*.yaml secrets create --name flyte-admin-secrets --fromPath /etc/scratch/secrets",
            ]
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop: ["ALL"]
          volumeMounts:
            - mountPath: /etc/flyte/config
              name: base-config-volume
            - mountPath: /etc/scratch
              name: scratch
          env:
            - name: POD_NAMESPACE
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
            {{- with .Values.flyteadmin.env -}}
            {{- tpl (toYaml .) $ | nindent 12 }}
            {{- end }}
      containers:
      - command:
        - flyteadmin
        - --config
        - {{ .Values.flyteadmin.configPath }}
        - serve
        {{- with .Values.flyteadmin.extraArgs }}
        {{- tpl (toYaml .) $ | nindent 8 }}
        {{- end }}
        {{- if .Values.flyteadmin.env }}
        env:
        {{- with .Values.flyteadmin.env -}}
        {{- tpl (toYaml .) $ | nindent 8 }}
        {{- end }}
        {{- end }}
        image: "{{ .Values.flyteadmin.image.repository }}:{{ .Values.flyteadmin.image.tag }}"
        imagePullPolicy: "{{ .Values.flyteadmin.image.pullPolicy }}"
        name: flyteadmin
        ports:
        - containerPort: {{ .Values.configmap.adminServer.server.httpPort }}
        - containerPort: {{ .Values.configmap.adminServer.server.grpc.port }}
        - containerPort: {{ .Values.configmap.adminServer.flyteadmin.profilerPort }}
        readinessProbe:
          exec:
            command: [ "sh", "-c", "reply=$(curl -s -o /dev/null -w %{http_code} http://127.0.0.1:8088/healthcheck); if [ \"$reply\" -lt 200 -o \"$reply\" -ge 400 ]; then exit 1; fi;","grpc_health_probe", "-addr=:8089"]
          initialDelaySeconds: 15
        livenessProbe:
          exec:
            command: [ "sh", "-c", "reply=$(curl -s -o /dev/null -w %{http_code} http://127.0.0.1:8088/healthcheck); if [ \"$reply\" -lt 200 -o \"$reply\" -ge 400 ]; then exit 1; fi;","grpc_health_probe", "-addr=:8089"]
          initialDelaySeconds: 20
          periodSeconds: 5
        resources: {{- toYaml .Values.flyteadmin.resources | nindent 10 }}
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop: ["ALL"]
        volumeMounts: {{- include "databaseSecret.volumeMount" . | nindent 8 }}
        - mountPath: /srv/flyte
          name: shared-data
        - mountPath: /etc/flyte/config
          name: clusters-config-volume
        - mountPath: /etc/secrets/
          name: admin-secrets
        {{- with .Values.flyteadmin.additionalVolumeMounts -}}
        {{ tpl (toYaml .) $ | nindent 8 }}
        {{- end }}
      {{- with .Values.flyteadmin.additionalContainers -}}
      {{- tpl (toYaml .) $ | nindent 6}}
      {{- end }}
      serviceAccountName: {{ template "flyteadmin.name" . }}
      volumes: {{- include "databaseSecret.volume" . | nindent 6 }}
      - emptyDir: {}
        name: shared-data
      - emptyDir: {}
        name: scratch
      - configMap:
          name: flyte-admin-base-config
        name: base-config-volume
      - projected:
          sources:
            - configMap:
                name: flyte-admin-base-config
            - configMap:
                name: flyte-admin-clusters-config
        name: clusters-config-volume
      {{- if .Values.cluster_resource_manager.enabled }}
      - configMap:
          name: clusterresource-template
        name: resource-templates
      {{- end }}
      - name: admin-secrets
        secret:
          secretName: flyte-admin-secrets
      {{- with .Values.flyteadmin.additionalVolumes -}}
      {{ tpl (toYaml .) $ | nindent 6 }}
      {{- end }}
      {{- with .Values.flyteadmin.nodeSelector }}
      nodeSelector: {{ tpl (toYaml .) $ | nindent 8 }}
      {{- end }}
      {{- with .Values.flyteadmin.affinity }}
      affinity: {{ tpl (toYaml .) $ | nindent 8 }}
      {{- end }}
      {{- with .Values.flyteadmin.tolerations }}
      tolerations: {{ tpl (toYaml .) $ | nindent 8 }}
      {{- end }}
{{- end }}