generate default deployment manifest (pomerium#266)

.pre-commit-config.yaml

@@ -6,7 +6,7 @@ repos:
       - id: end-of-file-fixer
         exclude: "(docs/.*|integration/tpl/files/.*)"
       - id: check-yaml
-        exclude: "examples/.*"
+        exclude: "deployment.yaml"
       - id: check-added-large-files
   - repo: https://github.com/syntaqx/git-hooks
     rev: v0.0.17

Makefile

@@ -199,6 +199,11 @@ $(ENVTEST): $(LOCALBIN)
 	@echo "==> $@"
 	@GOARCH= GOBIN=$(LOCALBIN) go install sigs.k8s.io/controller-runtime/tools/setup-envtest
 
+.PHONY: deployment
+deployment:
+	@echo "==> $@"
+	@$(KUSTOMIZE) build config/default > deployment.yaml
+
 #
 # --- internal development targets
 #

config/gen_secrets/job.yaml

@@ -17,7 +17,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: controller:latest
+          image: pomerium/ingress-controller:main
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false

config/pomerium/deployment.yaml

@@ -15,14 +15,12 @@ spec:
         runAsUser: 1000
       containers:
         - name: pomerium
-          command:
-            - /manager
           args:
             - all-in-one
             - --global-settings=$(POMERIUM_NAMESPACE)/settings
             - --update-status-from-service=$(POMERIUM_NAMESPACE)/pomerium-proxy
             - --metrics-bind-address=$(POD_IP):9090
-          image: controller:latest
+          image: pomerium/ingress-controller:main
           ports:
             - containerPort: 443
               name: https
@@ -50,7 +48,7 @@ spec:
               cpu: 5000m
               memory: 1Gi
             requests:
-              cpu: 1000m
+              cpu: 300m
               memory: 200Mi
       serviceAccountName: pomerium-controller
       terminationGracePeriodSeconds: 10