Skip to content

Instantly share code, notes, and snippets.

@rstarmer

rstarmer/metrics-server-helm-templates.yaml

Created December 16, 2019 22:36
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save rstarmer/f1e77773b26e3637f8517449d0bbd33f to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save rstarmer/f1e77773b26e3637f8517449d0bbd33f to your computer and use it in GitHub Desktop.
Download ZIP
The k8s templates from the stable/metrics-server chart
Raw
metrics-server-helm-templates.yaml
---
# Source: metrics-server/templates/metrics-server-serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: metrics-server
labels:
app: metrics-server
chart: metrics-server-2.8.8
release: metrics-server
heritage: Helm
---
# Source: metrics-server/templates/aggregated-metrics-reader-cluster-role.yaml
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: system:metrics-server-aggregated-reader
labels:
app: metrics-server
chart: metrics-server-2.8.8
release: metrics-server
heritage: Helm
rbac.authorization.k8s.io/aggregate-to-view: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rules:
- apiGroups: ["metrics.k8s.io"]
resources: ["pods","nodes"]
verbs: ["get", "list", "watch"]
---
# Source: metrics-server/templates/auth-delegator-crb.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: metrics-server:system:auth-delegator
namespace: kube-system
labels:
app: metrics-server
chart: metrics-server-2.8.8
release: metrics-server
heritage: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:auth-delegator
subjects:
- kind: ServiceAccount
name: metrics-server
namespace: default
---
# Source: metrics-server/templates/role-binding.yaml
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding
metadata:
name: metrics-server-auth-reader
namespace: kube-system
labels:
app: metrics-server
chart: metrics-server-2.8.8
release: metrics-server
heritage: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: extension-apiserver-authentication-reader
subjects:
- kind: ServiceAccount
name: metrics-server
namespace: default
---
# Source: metrics-server/templates/cluster-role.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: system:metrics-server
labels:
app: metrics-server
chart: metrics-server-2.8.8
release: metrics-server
heritage: Helm
rules:
- apiGroups:
- ""
resources:
- pods
- nodes
- nodes/stats
- namespaces
verbs:
- get
- list
- watch
---
# Source: metrics-server/templates/metrics-server-crb.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: system:metrics-server
labels:
app: metrics-server
chart: metrics-server-2.8.8
release: metrics-server
heritage: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:metrics-server
subjects:
- kind: ServiceAccount
name: metrics-server
namespace: default
---
# Source: metrics-server/templates/metrics-api-service.yaml
apiVersion: apiregistration.k8s.io/v1beta1
kind: APIService
metadata:
name: v1beta1.metrics.k8s.io
labels:
app: metrics-server
chart: metrics-server-2.8.8
release: metrics-server
heritage: Helm
spec:
service:
name: metrics-server
namespace: default
group: metrics.k8s.io
version: v1beta1
insecureSkipTLSVerify: true
groupPriorityMinimum: 100
versionPriority: 100
---
# Source: metrics-server/templates/metric-server-service.yaml
apiVersion: v1
kind: Service
metadata:
name: metrics-server
labels:
app: metrics-server
chart: metrics-server-2.8.8
release: metrics-server
heritage: Helm
annotations:
{}
spec:
ports:
- port: 443
protocol: TCP
targetPort: https
selector:
app: metrics-server
release: metrics-server
type: ClusterIP
---
# Source: metrics-server/templates/metrics-server-deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: metrics-server
labels:
app: metrics-server
chart: metrics-server-2.8.8
release: metrics-server
heritage: Helm
spec:
selector:
matchLabels:
app: metrics-server
release: metrics-server
replicas: 1
template:
metadata:
labels:
app: metrics-server
release: metrics-server
spec:
serviceAccountName: metrics-server
containers:
- name: metrics-server
image: "gcr.io/google_containers/metrics-server-amd64:v0.3.5"
imagePullPolicy: IfNotPresent
command:
- /metrics-server
- --cert-dir=/tmp
- --logtostderr
- --secure-port=8443
ports:
- containerPort: 8443
name: https
livenessProbe:
httpGet:
path: /healthz
port: https
scheme: HTTPS
initialDelaySeconds: 20
readinessProbe:
httpGet:
path: /healthz
port: https
scheme: HTTPS
initialDelaySeconds: 20
resources:
{}
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- all
readOnlyRootFilesystem: true
runAsGroup: 10001
runAsNonRoot: true
runAsUser: 10001
volumeMounts:
- name: tmp
mountPath: /tmp
nodeSelector:
{}
affinity:
{}
tolerations:
[]
volumes:
- name: tmp
emptyDir: {}
---
# Source: metrics-server/templates/tests/test-version.yaml
apiVersion: v1
kind: Pod
metadata:
name: metrics-server-test
labels:
app: metrics-server
chart: metrics-server-2.8.8
release: metrics-server
heritage: Helm
annotations:
"helm.sh/hook": test-success
spec:
containers:
- name: wget
image: busybox
command: ['/bin/sh']
args:
- -c
- 'wget -qO- https://metrics-server:443/version | grep -F v0.3.5'
restartPolicy: Never
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment