Skip to content

Instantly share code, notes, and snippets.

@caleblloyd
Created June 14, 2024 20:32
Show Gist options
  • Save caleblloyd/cad38a53751eb1604faf1c8744b16b77 to your computer and use it in GitHub Desktop.
Save caleblloyd/cad38a53751eb1604faf1c8744b16b77 to your computer and use it in GitHub Desktop.
Inject K8s Node Labels into NATS Config
config:
merge:
$include: server-tags/tags.conf
container:
patch:
- op: add
path: /volumeMounts/-
value:
name: server-tags
mountPath: /etc/nats-config/server-tags
podTemplate:
merge:
spec:
initContainers:
- name: server-tags
image:
$tplYaml: >-
bitnami/kubectl:{{ .Capabilities.KubeVersion.Major }}.{{ .Capabilities.KubeVersion.Minor }}
command: ["sh", "-ec"]
env:
- name: NODE_NAME
valueFrom:
fieldRef:
fieldPath: spec.nodeName
args:
- |-
kubectl get node "$NODE_NAME" --output json \
| jq '{"server_tags": [ .metadata.labels | to_entries | .[] | .key + ":" + .value ]}' \
> /server-tags/tags.conf
echo "wrote server tags"
volumeMounts:
- name: server-tags
mountPath: /server-tags
patch:
- op: add
path: /spec/volumes/-
value:
name: server-tags
emptyDir: {}
extraResources:
- apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name:
$tplYaml: >-
{{ include "nats.namespace" $ }}-{{ include "nats.fullname" $ }}-get-nodes
rules:
- apiGroups: [""]
resources: ["nodes"]
verbs: ["get"]
- apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name:
$tplYaml: >-
{{ include "nats.namespace" $ }}-{{ include "nats.fullname" $ }}-get-nodes-binding
subjects:
- kind: ServiceAccount
name:
$tplYaml: >-
{{ .Values.serviceAccount.name }}
namespace:
$tplYaml: >-
{{ include "nats.namespace" $ }}
roleRef:
kind: ClusterRole
name:
$tplYaml: >-
{{ include "nats.namespace" $ }}-{{ include "nats.fullname" $ }}-get-nodes
apiGroup: rbac.authorization.k8s.io
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment