kube-controller-manager.manifest 2.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107
  1. {
  2. "apiVersion": "v1",
  3. "kind": "Pod",
  4. "metadata": {
  5. "name":"kube-controller-manager",
  6. "namespace": "kube-system",
  7. "annotations": {
  8. "scheduler.alpha.kubernetes.io/critical-pod": "",
  9. "seccomp.security.alpha.kubernetes.io/pod": "docker/default"
  10. },
  11. "labels": {
  12. "tier": "control-plane",
  13. "component": "kube-controller-manager"
  14. }
  15. },
  16. "spec":{
  17. "hostNetwork": true,
  18. "containers":[
  19. {
  20. "name": "kube-controller-manager",
  21. "image": "{{pillar['kube_docker_registry']}}/kube-controller-manager:{{pillar['kube-controller-manager_docker_tag']}}",
  22. "resources": {
  23. "requests": {
  24. "cpu": "{{cpurequest}}"
  25. }
  26. },
  27. "command": [
  28. "/bin/sh",
  29. "-c",
  30. "exec /usr/local/bin/kube-controller-manager {{params}} 1>>/var/log/kube-controller-manager.log 2>&1"
  31. ],
  32. {{container_env}}
  33. "livenessProbe": {
  34. "httpGet": {
  35. "host": "127.0.0.1",
  36. "port": 10252,
  37. "path": "/healthz"
  38. },
  39. "initialDelaySeconds": 15,
  40. "timeoutSeconds": 15
  41. },
  42. "volumeMounts": [
  43. {{cloud_config_mount}}
  44. {{additional_cloud_config_mount}}
  45. {{pv_recycler_mount}}
  46. { "name": "srvkube",
  47. "mountPath": "/etc/srv/kubernetes",
  48. "readOnly": true},
  49. {{flexvolume_hostpath_mount}}
  50. { "name": "logfile",
  51. "mountPath": "/var/log/kube-controller-manager.log",
  52. "readOnly": false},
  53. { "name": "etcssl",
  54. "mountPath": "/etc/ssl",
  55. "readOnly": true},
  56. { "name": "usrsharecacerts",
  57. "mountPath": "/usr/share/ca-certificates",
  58. "readOnly": true},
  59. { "name": "varssl",
  60. "mountPath": "/var/ssl",
  61. "readOnly": true},
  62. { "name": "etcopenssl",
  63. "mountPath": "/etc/openssl",
  64. "readOnly": true},
  65. { "name": "etcpki",
  66. "mountPath": "/etc/pki",
  67. "readOnly": true}
  68. ]
  69. }
  70. ],
  71. "volumes":[
  72. {{cloud_config_volume}}
  73. {{additional_cloud_config_volume}}
  74. {{pv_recycler_volume}}
  75. { "name": "srvkube",
  76. "hostPath": {
  77. "path": "/etc/srv/kubernetes"}
  78. },
  79. {{flexvolume_hostpath}}
  80. { "name": "logfile",
  81. "hostPath": {
  82. "path": "/var/log/kube-controller-manager.log",
  83. "type": "FileOrCreate"}
  84. },
  85. { "name": "etcssl",
  86. "hostPath": {
  87. "path": "/etc/ssl"}
  88. },
  89. { "name": "usrsharecacerts",
  90. "hostPath": {
  91. "path": "/usr/share/ca-certificates"}
  92. },
  93. { "name": "varssl",
  94. "hostPath": {
  95. "path": "/var/ssl"}
  96. },
  97. { "name": "etcopenssl",
  98. "hostPath": {
  99. "path": "/etc/openssl"}
  100. },
  101. { "name": "etcpki",
  102. "hostPath": {
  103. "path": "/etc/pki"}
  104. }
  105. ]
  106. }}