1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071 |
- apiVersion: v1
- kind: Pod
- metadata:
- name: kube-apiserver
- namespace: kube-system
- spec:
- hostNetwork: true
- containers:
- - name: kube-apiserver
- image: {{kube_docker_registry}}/kube-apiserver:{{kube-apiserver_docker_tag}}
- imagePullPolicy: IfNotPresent
- resources:
- requests:
- cpu: 250m
- command:
- - /bin/sh
- - -c
- - /usr/local/bin/kube-apiserver
- {{params}}
- 1>>/var/log/kube-apiserver.log 2>&1
- livenessProbe:
- httpGet:
- host: 127.0.0.1
- path: /healthz
- port: 8080
- scheme: HTTP
- initialDelaySeconds: 15
- timeoutSeconds: 15
- ports:
- - name: https
- containerPort: 443
- hostPort: 443
- protocol: TCP
- - name: local
- containerPort: 8080
- hostPort: 8080
- protocol: TCP
- volumeMounts:
- {{audit_policy_config_mount}}
- - name: srvkube
- mountPath: /etc/srv/kubernetes
- readOnly: true
- - name: logfile
- mountPath: /var/log/kube-apiserver.log
- - name: etcssl
- mountPath: /etc/ssl
- readOnly: true
- - name: usrsharecacerts
- mountPath: /usr/share/ca-certificates
- readOnly: true
- - name: srvsshproxy
- mountPath: /etc/srv/sshproxy
- volumes:
- {{audit_policy_config_volume}}
- - name: srvkube
- hostPath:
- path: /etc/srv/kubernetes
- - name: logfile
- hostPath:
- path: /var/log/kube-apiserver.log
- type: FileOrCreate
- - name: etcssl
- hostPath:
- path: /etc/ssl
- - name: usrsharecacerts
- hostPath:
- path: /usr/share/ca-certificates
- - name: srvsshproxy
- hostPath:
- path: /etc/srv/sshproxy
|