andata
/
rke2-charts
mirror of https://git.rancher.io/rke2-charts
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #110 from mrostecki/multus-ds-init-privileged 

multus: Make the daemonset init container privileged
pull/473/head
actions 2021-06-23 18:02:33 +00:00
parent 98b3cd57b7
commit 341a46cb1d
10 changed files with 201 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
assets/rke2-multus/rke2-multus-v3.7.1-build2021041603.tgz Executable file
View File

Binary file not shown.

12
charts/rke2-multus/rke2-multus/v3.7.1-build2021041603/Chart.yaml Executable file
View File

@ -0,0 +1,12 @@
apiVersion: v1
appVersion: v3.7.1
description: Multus CNI enables attaching multiple network interfaces to pods in Kubernetes.
home: https://github.com/k8snetworkplumbingwg/multus-cni
icon: https://raw.githubusercontent.com/k8snetworkplumbingwg/multus-cni/master/doc/images/Multus.png
maintainers:
- email: charts@rancher.com
name: Rancher Labs
name: rke2-multus
sources:
- https://github.com/k8snetworkplumbingwg/multus-cni
version: v3.7.1-build2021041603

7
charts/rke2-multus/rke2-multus/v3.7.1-build2021041603/templates/_helpers.tpl Executable file
View File

@ -0,0 +1,7 @@
{{- define "system_default_registry" -}}
{{- if .Values.global.systemDefaultRegistry -}}
{{- printf "%s/" .Values.global.systemDefaultRegistry -}}
{{- else -}}
{{- "" -}}
{{- end -}}
{{- end -}}

27
charts/rke2-multus/rke2-multus/v3.7.1-build2021041603/templates/clusterrole.yaml Executable file
View File

@ -0,0 +1,27 @@
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: multus
rules:
- apiGroups: ["k8s.cni.cncf.io"]
resources:
- '*'
verbs:
- '*'
- apiGroups:
- ""
resources:
- pods
- pods/status
verbs:
- get
- update
- apiGroups:
- ""
- events.k8s.io
resources:
- events
verbs:
- create
- patch
- update

12
charts/rke2-multus/rke2-multus/v3.7.1-build2021041603/templates/clusterrolebinding.yaml Executable file
View File

@ -0,0 +1,12 @@
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: multus
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: multus
subjects:
- kind: ServiceAccount
name: multus
namespace: {{ .Release.Namespace }}

61
charts/rke2-multus/rke2-multus/v3.7.1-build2021041603/templates/daemonset.yaml Executable file
View File

@ -0,0 +1,61 @@
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: kube-multus-ds
namespace: {{ .Release.Namespace }}
spec:
selector:
matchLabels:
name: multus
template:
metadata:
labels:
name: multus
spec:
hostNetwork: true
tolerations:
- operator: Exists
effect: NoSchedule
- operator: Exists
effect: NoExecute
serviceAccountName: multus
initContainers:
- name: cni-plugins
image: {{ template "system_default_registry" . }}{{ .Values.cniplugins.image.repository }}:{{ .Values.cniplugins.image.tag }}
securityContext:
privileged: true
volumeMounts:
- name: cnibin
mountPath: /host/opt/cni/bin
env:
- name: SKIP_CNI_BINARIES
value: {{ .Values.cniplugins.skipcnis }}
containers:
- name: kube-multus
image: {{ template "system_default_registry" . }}{{ .Values.multus.image.repository }}:{{ .Values.multus.image.tag }}
command: ["/entrypoint.sh"]
args:
- "--multus-conf-file=auto"
- "--cni-version=0.3.1"
resources:
requests:
cpu: "100m"
memory: "50Mi"
limits:
cpu: "100m"
memory: "50Mi"
securityContext:
privileged: true
volumeMounts:
- name: cni
mountPath: /host/etc/cni/net.d
- name: cnibin
mountPath: /host/opt/cni/bin
terminationGracePeriodSeconds: 10
volumes:
- name: cni
hostPath:
path: /etc/cni/net.d
- name: cnibin
hostPath:
path: /opt/cni/bin

44
charts/rke2-multus/rke2-multus/v3.7.1-build2021041603/templates/networkattachmendefinitions.crd.yaml Executable file
View File

@ -0,0 +1,44 @@
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
name: network-attachment-definitions.k8s.cni.cncf.io
spec:
group: k8s.cni.cncf.io
scope: Namespaced
names:
plural: network-attachment-definitions
singular: network-attachment-definition
kind: NetworkAttachmentDefinition
shortNames:
- net-attach-def
versions:
- name: v1
served: true
storage: true
schema:
openAPIV3Schema:
description: 'NetworkAttachmentDefinition is a CRD schema specified by the Network Plumbing
Working Group to express the intent for attaching pods to one or more logical or physical
networks. More information available at: https://github.com/k8snetworkplumbingwg/multi-net-spec'
type: object
properties:
apiVersion:
description: 'APIVersion defines the versioned schema of this represen
tation of an object. Servers should convert recognized schemas to the
latest internal value, and may reject unrecognized values. More info:
https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
type: string
kind:
description: 'Kind is a string value representing the REST resource this
object represents. Servers may infer this from the endpoint the client
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
type: string
metadata:
type: object
spec:
description: 'NetworkAttachmentDefinition spec defines the desired state of a network attachment'
type: object
properties:
config:
description: 'NetworkAttachmentDefinition config is a JSON-formatted CNI configuration'
type: string

5
charts/rke2-multus/rke2-multus/v3.7.1-build2021041603/templates/serviceaccount.yaml Executable file
View File

@ -0,0 +1,5 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: multus
namespace: {{ .Release.Namespace }}

16
charts/rke2-multus/rke2-multus/v3.7.1-build2021041603/values.yaml Executable file
View File

@ -0,0 +1,16 @@
multus:
image:
repository: rancher/hardened-multus-cni
tag: v3.7.1-build20210416
cniplugins:
image:
repository: rancher/hardened-cni-plugins
tag: v0.9.1-build20210414
# skipcnis is a comma separated list of cni binaries to skip from
# installing.
skipcnis: flannel
global:
systemDefaultRegistry: ""

17
index.yaml
View File

@ -1478,6 +1478,23 @@ entries:
- assets/rke2-metrics-server/rke2-metrics-server-2.11.100-build2021022300.tgz
version: 2.11.100-build2021022300
rke2-multus:
- apiVersion: v1
appVersion: v3.7.1
created: "2021-06-23T18:02:33.469096164Z"
description: Multus CNI enables attaching multiple network interfaces to pods
in Kubernetes.
digest: e3dc2dd4b1c5a0b193c83a59ed35d69d8463d8c89fbc93671e6dbaeb34111dfd
home: https://github.com/k8snetworkplumbingwg/multus-cni
icon: https://raw.githubusercontent.com/k8snetworkplumbingwg/multus-cni/master/doc/images/Multus.png
maintainers:
- email: charts@rancher.com
name: Rancher Labs
name: rke2-multus
sources:
- https://github.com/k8snetworkplumbingwg/multus-cni
urls:
- assets/rke2-multus/rke2-multus-v3.7.1-build2021041603.tgz
version: v3.7.1-build2021041603
- apiVersion: v1
appVersion: v3.7.1
created: "2021-05-27T19:13:47.820940509Z"