ston1th/cloud-provider-pve
0
0
Fork 0
Code Issues 4 Pull requests Releases Wiki Activity

back to deployment

Browse source
This commit is contained in:
ston1th 2020-11-01 00:29:37 +01:00
commit 162cc1613f
2 changed files with 114 additions and 99 deletions
Download patch file Download diff file Expand all files Collapse all files

111
deploy/pve-cloud-controller-manager.yaml
View file

@ -70,61 +70,68 @@ subjects:
name: cloud-controller-manager name: cloud-controller-manager
namespace: kube-system namespace: kube-system
--- ---
apiVersion: v1 apiVersion: apps/v1
kind: Pod kind: Deployment
metadata: metadata:
name: pve-cloud-controller-manager name: pve-cloud-controller-manager
namespace: kube-system namespace: kube-system
labels: labels:
app: pve-cloud-controller-manager app: pve-cloud-controller-manager
spec: spec:
priorityClassName: system-node-critical replicas: 1
#hostNetwork: true selector:
containers: matchLabels:
- args: app: pve-cloud-controller-manager
- --cloud-config=/etc/kubernetes/pve.json template:
- --tls-min-version=VersionTLS12 metadata:
- --tls-cipher-suites="TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" labels:
- --cloud-provider=pve app: pve-cloud-controller-manager
- --leader-elect=true spec:
image: reg.k8s.giftfish.de/library/pve-cloud-controller-manager-amd64:dev priorityClassName: system-node-critical
imagePullPolicy: Always containers:
livenessProbe: - args:
httpGet: - --cloud-config=/etc/kubernetes/pve.json
path: /healthz - --tls-min-version=VersionTLS12
port: 10258 - --tls-cipher-suites="TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
scheme: HTTPS - --cloud-provider=pve
initialDelaySeconds: 3 - --leader-elect=true
periodSeconds: 3 image: reg.k8s.giftfish.de/library/pve-cloud-controller-manager-amd64:dev
name: manager imagePullPolicy: Always
resources: livenessProbe:
requests: httpGet:
cpu: 100m path: /healthz
memory: 50Mi port: 10258
volumeMounts: scheme: HTTPS
- name: etc-kubernetes initialDelaySeconds: 3
mountPath: /etc/kubernetes periodSeconds: 3
readOnly: true name: manager
- name: etc-ssl resources:
mountPath: /etc/ssl requests:
readOnly: true cpu: 100m
volumes: memory: 50Mi
- name: etc-kubernetes volumeMounts:
hostPath: - name: config
path: /etc/kubernetes mountPath: /etc/kubernetes/pve.json
- name: etc-ssl readOnly: true
hostPath: - name: ca-certs
path: /etc/ssl mountPath: /etc/ssl/certs
dnsPolicy: Default readOnly: true
serviceAccountName: cloud-controller-manager volumes:
tolerations: - name: config
- effect: NoSchedule hostPath:
key: node.cloudprovider.kubernetes.io/uninitialized path: /etc/kubernetes/pve.json
value: "true" - name: ca-certs
- key: CriticalAddonsOnly hostPath:
operator: Exists path: /etc/ssl/certs
- effect: NoSchedule dnsPolicy: Default
key: node-role.kubernetes.io/master serviceAccountName: cloud-controller-manager
- effect: NoSchedule tolerations:
key: node.kubernetes.io/not-ready - effect: NoSchedule
key: node.cloudprovider.kubernetes.io/uninitialized
value: "true"
- key: CriticalAddonsOnly
operator: Exists
- effect: NoSchedule
key: node-role.kubernetes.io/master
- effect: NoSchedule
key: node.kubernetes.io/not-ready

102
deploy/pve-csr-approver-manager.yaml
View file

@ -46,56 +46,64 @@ subjects:
namespace: kube-system namespace: kube-system
name: pve-csr-approver name: pve-csr-approver
--- ---
apiVersion: v1 apiVersion: apps/v1
kind: Pod kind: Deployment
metadata: metadata:
name: pve-csr-approver-manager name: pve-csr-approver-manager
namespace: kube-system namespace: kube-system
labels: labels:
app: pve-csr-approver-manager app: pve-csr-approver-manager
spec: spec:
priorityClassName: system-node-critical replicas: 1
#hostNetwork: true selector:
containers: matchLabels:
- args: app: pve-csr-approver-manager
- --cloud-config=/etc/kubernetes/pve.json template:
- --leader-elect=true metadata:
name: manager labels:
image: reg.k8s.giftfish.de/library/pve-csr-approver-manager-amd64:dev app: pve-csr-approver-manager
imagePullPolicy: Always spec:
livenessProbe: priorityClassName: system-node-critical
httpGet: containers:
path: /healthz - args:
port: 9449 - --cloud-config=/etc/kubernetes/pve.json
initialDelaySeconds: 3 - --leader-elect=true
periodSeconds: 3 name: manager
resources: image: reg.k8s.giftfish.de/library/pve-csr-approver-manager-amd64:dev
requests: imagePullPolicy: Always
cpu: 100m livenessProbe:
memory: 50Mi httpGet:
volumeMounts: path: /healthz
- name: etc-kubernetes port: 9449
mountPath: /etc/kubernetes initialDelaySeconds: 3
readOnly: true periodSeconds: 3
- name: etc-ssl resources:
mountPath: /etc/ssl requests:
readOnly: true cpu: 100m
volumes: memory: 50Mi
- name: etc-kubernetes volumeMounts:
hostPath: - name: config
path: /etc/kubernetes mountPath: /etc/kubernetes/pve.json
- name: etc-ssl readOnly: true
hostPath: - name: ca-certs
path: /etc/ssl mountPath: /etc/ssl/certs
dnsPolicy: Default readOnly: true
serviceAccountName: pve-csr-approver volumes:
tolerations: - name: config
- effect: NoSchedule hostPath:
key: node.cloudprovider.kubernetes.io/uninitialized path: /etc/kubernetes/pve.json
value: "true" - name: ca-certs
- key: CriticalAddonsOnly hostPath:
operator: Exists path: /etc/ssl/certs
- effect: NoSchedule dnsPolicy: Default
key: node-role.kubernetes.io/master serviceAccountName: pve-csr-approver
- effect: NoSchedule tolerations:
key: node.kubernetes.io/not-ready - effect: NoSchedule
key: node.cloudprovider.kubernetes.io/uninitialized
value: "true"
- key: CriticalAddonsOnly
operator: Exists
- effect: NoSchedule
key: node-role.kubernetes.io/master
- effect: NoSchedule
key: node.kubernetes.io/not-ready