{ "apiVersion": "v1", "kind": "Pod", "metadata": { "name":"kube-controller-manager", "namespace": "kube-system", "annotations": { "scheduler.alpha.kubernetes.io/critical-pod": "", "seccomp.security.alpha.kubernetes.io/pod": "docker/default" }, "labels": { "tier": "control-plane", "component": "kube-controller-manager" } }, "spec":{ "hostNetwork": true, "containers":[ { "name": "kube-controller-manager", "image": "{{pillar['kube_docker_registry']}}/kube-controller-manager:{{pillar['kube-controller-manager_docker_tag']}}", "resources": { "requests": { "cpu": "{{cpurequest}}" } }, "command": [ "/bin/sh", "-c", "exec /usr/local/bin/kube-controller-manager {{params}} 1>>/var/log/kube-controller-manager.log 2>&1" ], {{container_env}} "livenessProbe": { "httpGet": { "host": "127.0.0.1", "port": 10252, "path": "/healthz" }, "initialDelaySeconds": 15, "timeoutSeconds": 15 }, "volumeMounts": [ {{cloud_config_mount}} {{additional_cloud_config_mount}} {{pv_recycler_mount}} { "name": "srvkube", "mountPath": "/etc/srv/kubernetes", "readOnly": true}, {{flexvolume_hostpath_mount}} { "name": "logfile", "mountPath": "/var/log/kube-controller-manager.log", "readOnly": false}, { "name": "etcssl", "mountPath": "/etc/ssl", "readOnly": true}, { "name": "usrsharecacerts", "mountPath": "/usr/share/ca-certificates", "readOnly": true}, { "name": "varssl", "mountPath": "/var/ssl", "readOnly": true}, { "name": "etcopenssl", "mountPath": "/etc/openssl", "readOnly": true}, { "name": "etcpki", "mountPath": "/etc/pki", "readOnly": true} ] } ], "volumes":[ {{cloud_config_volume}} {{additional_cloud_config_volume}} {{pv_recycler_volume}} { "name": "srvkube", "hostPath": { "path": "/etc/srv/kubernetes"} }, {{flexvolume_hostpath}} { "name": "logfile", "hostPath": { "path": "/var/log/kube-controller-manager.log", "type": "FileOrCreate"} }, { "name": "etcssl", "hostPath": { "path": "/etc/ssl"} }, { "name": "usrsharecacerts", "hostPath": { "path": "/usr/share/ca-certificates"} }, { "name": "varssl", "hostPath": { "path": "/var/ssl"} }, { "name": "etcopenssl", "hostPath": { "path": "/etc/openssl"} }, { "name": "etcpki", "hostPath": { "path": "/etc/pki"} } ] }}