58 lines
1.7 KiB
YAML
58 lines
1.7 KiB
YAML
|
apiVersion: apps/v1
|
||
|
kind: DaemonSet
|
||
|
metadata:
|
||
|
name: kubeslice-netop
|
||
|
namespace: {{ .Release.Namespace }}
|
||
|
spec:
|
||
|
selector:
|
||
|
matchLabels:
|
||
|
app: app_net_op
|
||
|
template:
|
||
|
metadata:
|
||
|
annotations:
|
||
|
prometheus.io/port: "18080"
|
||
|
prometheus.io/scrape: "true"
|
||
|
labels:
|
||
|
app: app_net_op
|
||
|
kubeslice.io/pod-type: netop
|
||
|
spec:
|
||
|
affinity:
|
||
|
nodeAffinity:
|
||
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||
|
nodeSelectorTerms:
|
||
|
- matchExpressions:
|
||
|
- key: kubeslice.io/node-type
|
||
|
operator: In
|
||
|
values:
|
||
|
- gateway
|
||
|
hostNetwork: true
|
||
|
serviceAccount: kubeslice-netop
|
||
|
containers:
|
||
|
- env:
|
||
|
- name: POD_TYPE
|
||
|
value: NETOP_POD
|
||
|
- name: NETWORK_INTERFACE
|
||
|
value: {{ .Values.netop.networkInterface }}
|
||
|
image: {{ .Values.netop.image }}:{{ .Values.netop.tag }}
|
||
|
imagePullPolicy: {{ .Values.netop.pullPolicy }}
|
||
|
name: avesha-sidecar
|
||
|
securityContext:
|
||
|
allowPrivilegeEscalation: true
|
||
|
capabilities:
|
||
|
add:
|
||
|
- NET_ADMIN
|
||
|
privileged: true
|
||
|
{{- if and .Values.imagePullSecrets .Values.imagePullSecrets.repository .Values.imagePullSecrets.username .Values.imagePullSecrets.password }}
|
||
|
imagePullSecrets:
|
||
|
- name: kubeslice-image-pull-secret
|
||
|
{{- end }}
|
||
|
tolerations:
|
||
|
- key: "kubeslice.io/node-type"
|
||
|
operator: "Equal"
|
||
|
value: "gateway"
|
||
|
effect: "NoSchedule"
|
||
|
- key: "kubeslice.io/node-type"
|
||
|
operator: "Equal"
|
||
|
value: "gateway"
|
||
|
effect: "NoExecute"
|