summaryrefslogtreecommitdiffstats
path: root/roles/contiv/templates/api-proxy-daemonset.yml.j2
blob: 4d4388706ff962335d97e8b0980d06e74a4057b7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
---
apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
  name: contiv-api-proxy
  namespace: kube-system
spec:
  updateStrategy:
    type: RollingUpdate
  selector:
    matchLabels:
      name: contiv-api-proxy
  template:
    metadata:
      namespace: kube-system
      labels:
        name: contiv-api-proxy
      annotations:
        scheduler.alpha.kubernetes.io/critical-pod: ""
    spec:
      serviceAccountName: contiv-api-proxy
      hostNetwork: true
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: kubernetes.io/hostname
                operator: In
                values:
{% for node in groups.oo_masters_to_config %}
                  - "{{ node }}"
{% endfor %}
      tolerations:
        - key: node-role.kubernetes.io/master
          effect: NoSchedule
      containers:
        - name: contiv-api-proxy
          image: "{{ contiv_api_proxy_image_repo }}:{{ contiv_version }}"
          args:
            - "--listen-address=0.0.0.0:{{ contiv_api_proxy_port }}"
            - --tls-key-file=/var/contiv/api_proxy_key.pem
            - --tls-certificate=/var/contiv/api_proxy_cert.pem
            - "--data-store-address={{ etcd_host }}"
            - "--netmaster-address=127.0.0.1:{{ contiv_netmaster_port }}"
          ports:
            - containerPort: "{{ contiv_api_proxy_port }}"
              hostPort: "{{ contiv_api_proxy_port }}"
          volumeMounts:
            - name: secret-volume
              mountPath: /var/contiv
              readOnly: true
      volumes:
        - name: secret-volume
          secret:
            secretName: contiv-api-proxy-secret