awx/installer/roles/kubernetes/templates/management-pod.yml.j2

---
apiVersion: v1
kind: Pod
metadata:
  name: ansible-tower-management
  namespace: {{ kubernetes_namespace }}
spec:
  containers:
    - name: ansible-tower-management
      image: "{{ kubernetes_task_image }}:{{ kubernetes_task_version }}"
      command: ["sleep", "infinity"]
      volumeMounts:
        - name: {{ kubernetes_deployment_name }}-application-config
          mountPath: "/etc/tower"
          readOnly: true

        - name: "{{ kubernetes_deployment_name }}-application-credentials"
          mountPath: "/etc/tower/conf.d/"
          readOnly: true
      resources:
{% if management_mem_limit is defined or management_cpu_limit is defined %}
        limits:
{% endif %}
{% if management_mem_limit is defined %}
          memory: "{{ management_mem_limit }}Gi"
{% endif %}
{% if management_cpu_limit is defined %}
          cpu: "{{ management_cpu_limit }}m"
{% endif %}
  volumes:
    - name: {{ kubernetes_deployment_name }}-application-config
      configMap:
        name: {{ kubernetes_deployment_name }}-config
        items:
          - key: {{ kubernetes_deployment_name }}_settings
            path: settings.py
          - key: secret_key
            path: SECRET_KEY

    - name: "{{ kubernetes_deployment_name }}-application-credentials"
      secret:
        secretName: "{{ kubernetes_deployment_name }}-secrets"
        items:
          - key: credentials_py
            path: 'credentials.py'

  restartPolicy: Never