blob: a15073580d45b9c12cc1d7a2b80930cec9d29696 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
---
apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
name: contiv-api-proxy
namespace: kube-system
spec:
updateStrategy:
type: RollingUpdate
selector:
matchLabels:
name: contiv-api-proxy
template:
metadata:
namespace: kube-system
labels:
name: contiv-api-proxy
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ""
spec:
serviceAccountName: contiv-api-proxy
hostNetwork: true
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: kubernetes.io/hostname
operator: In
values:
{% for node in groups.oo_masters_to_config %}
- "{{ node }}"
{% endfor %}
tolerations:
- key: node-role.kubernetes.io/master
effect: NoSchedule
containers:
- name: contiv-api-proxy
image: "{{ contiv_api_proxy_image_repo }}:{{ contiv_version }}"
args:
- "--listen-address=0.0.0.0:{{ contiv_api_proxy_port }}"
- --tls-key-file=/var/contiv/api_proxy_key.pem
- --tls-certificate=/var/contiv/api_proxy_cert.pem
- "--data-store-address={{ etcd_host }}"
- --data-store-driver=etcd
- "--netmaster-address=127.0.0.1:{{ contiv_netmaster_port }}"
ports:
- containerPort: "{{ contiv_api_proxy_port }}"
hostPort: "{{ contiv_api_proxy_port }}"
volumeMounts:
- name: secret-volume
mountPath: /var/contiv
readOnly: true
volumes:
- name: secret-volume
secret:
secretName: contiv-api-proxy-secret
|
