deployment.yaml.in

---
apiVersion: apps/v1  # for versions before 1.9.0 use apps/v1beta2
kind: Deployment
metadata:
  name: aks-audit-log-forwarder
  labels:
    app: aks-audit-log-forwarder
spec:
  selector:
    matchLabels:
      app: aks-audit-log-forwarder
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: aks-audit-log-forwarder
    spec:
      containers:
        - image: sysdiglabs/aks-audit-log-forwarder:$ImageVersion
          imagePullPolicy: $ImagePullPolicy
          name: aks-audit-log-forwarder
          resources:
            # Resources needed are subjective to the actual workload.
            # Please refer to Sysdig Support for more info.
            requests:
              cpu: 20m
              memory: 512Mi
            limits:
              cpu: 200m
              memory: 1024Mi
          readinessProbe:
            exec:
              command:
                - wget
                - localhost:5000/metrics
                - --spider
            initialDelaySeconds: 10
          livenessProbe:
            httpGet:
              path: /metrics
              port: 5000
            initialDelaySeconds: 10
            periodSeconds: 20
          env:
            - name: EhubNamespaceConnectionString
              value: "$EhubNamespaceConnectionString"
            - name: BlobStorageConnectionString
              value: "$BlobStorageConnectionString"
            - name: EventHubName
              value: "insights-logs-kube-audit"
            - name: BlobContainerName
              value: "kubeauditlogcontainer"
            - name: WebSinkURL
              value: "http://falco-k8saudit-webhook:9765/k8s-audit"
            - name: VerboseLevel
              value: "$VerboseLevel"