ceph-csi/vendor/k8s.io/kubernetes/cluster/addons/ip-masq-agent/ip-masq-agent.yaml

63 lines
1.7 KiB
YAML
Raw Normal View History

2018-01-09 18:57:14 +00:00
apiVersion: v1
kind: ServiceAccount
metadata:
name: ip-masq-agent
namespace: kube-system
labels:
k8s-app: ip-masq-agent
kubernetes.io/cluster-service: "true"
addonmanager.kubernetes.io/mode: Reconcile
---
# https://github.com/kubernetes-incubator/ip-masq-agent/blob/v2.0.0/README.md
apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
name: ip-masq-agent
namespace: kube-system
labels:
addonmanager.kubernetes.io/mode: Reconcile
spec:
template:
metadata:
labels:
k8s-app: ip-masq-agent
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
2018-03-06 22:33:18 +00:00
priorityClassName: system-node-critical
2018-01-09 18:57:14 +00:00
serviceAccountName: ip-masq-agent
hostNetwork: true
containers:
- name: ip-masq-agent
2018-11-26 18:23:56 +00:00
image: k8s.gcr.io/ip-masq-agent-amd64:v2.1.1
args:
- --masq-chain=IP-MASQ
2018-01-09 18:57:14 +00:00
resources:
requests:
cpu: 10m
memory: 16Mi
securityContext:
privileged: true
volumeMounts:
- name: config
mountPath: /etc/config
nodeSelector:
beta.kubernetes.io/masq-agent-ds-ready: "true"
volumes:
- name: config
configMap:
# Note this ConfigMap must be created in the same namespace as the daemon pods - this spec uses kube-system
name: ip-masq-agent
optional: true
items:
# The daemon looks for its config in a YAML file at /etc/config/ip-masq-agent
- key: config
path: ip-masq-agent
tolerations:
2018-11-26 18:23:56 +00:00
- effect: NoSchedule
operator: Exists
- effect: NoExecute
operator: Exists
2018-01-09 18:57:14 +00:00
- key: "CriticalAddonsOnly"
operator: "Exists"