mirror of https://git.rancher.io/rke2-charts
79 lines
2.0 KiB
YAML
79 lines
2.0 KiB
YAML
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
labels:
|
|
k8s-app: kube-proxy
|
|
name: kube-proxy
|
|
namespace: kube-system
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
k8s-app: kube-proxy
|
|
template:
|
|
metadata:
|
|
labels:
|
|
k8s-app: kube-proxy
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- /usr/local/bin/kube-proxy
|
|
- --config=/var/lib/kube-proxy/config.conf
|
|
- --hostname-override=$(NODE_NAME)
|
|
env:
|
|
- name: NODE_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: spec.nodeName
|
|
image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
|
|
imagePullPolicy: IfNotPresent
|
|
name: kube-proxy
|
|
securityContext:
|
|
privileged: true
|
|
volumeMounts:
|
|
- mountPath: /var/lib/kube-proxy
|
|
name: kube-proxy
|
|
- mountPath: /var/lib/rancher/rke2/agent
|
|
name: rke2config
|
|
readOnly: true
|
|
- mountPath: /run/xtables.lock
|
|
name: xtables-lock
|
|
- mountPath: /lib/modules
|
|
name: lib-modules
|
|
readOnly: true
|
|
dnsPolicy: ClusterFirst
|
|
hostNetwork: true
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
priorityClassName: system-node-critical
|
|
restartPolicy: Always
|
|
schedulerName: default-scheduler
|
|
securityContext: {}
|
|
serviceAccount: kube-proxy
|
|
serviceAccountName: kube-proxy
|
|
terminationGracePeriodSeconds: 30
|
|
tolerations:
|
|
- key: CriticalAddonsOnly
|
|
operator: Exists
|
|
- operator: Exists
|
|
volumes:
|
|
- hostPath:
|
|
path: /var/lib/rancher/rke2/agent
|
|
type: ""
|
|
name: rke2config
|
|
- configMap:
|
|
name: kube-proxy
|
|
name: kube-proxy
|
|
- hostPath:
|
|
path: /run/xtables.lock
|
|
type: FileOrCreate
|
|
name: xtables-lock
|
|
- hostPath:
|
|
path: /lib/modules
|
|
type: ""
|
|
name: lib-modules
|
|
updateStrategy:
|
|
rollingUpdate:
|
|
maxUnavailable: 1
|
|
type: RollingUpdate
|