43 lines
1.1 KiB
Text
43 lines
1.1 KiB
Text
|
apiVersion: v1
|
||
|
|
kind: Pod
|
||
|
|
metadata:
|
||
|
|
name: kube-proxy
|
||
|
|
namespace: kube-system
|
||
|
|
spec:
|
||
|
|
hostNetwork: true
|
||
|
|
containers:
|
||
|
|
- name: kube-proxy
|
||
|
|
image: {{ hyperkube_image.name }}:{{ hyperkube_image.tag }}
|
||
|
|
command:
|
||
|
|
- /hyperkube
|
||
|
|
- proxy
|
||
|
|
- --v={{ kube_log_level | default('2') }}
|
||
|
|
{% if inventory_hostname in groups['kube-master'] %}
|
||
|
|
- --master=http://127.0.0.1:8080
|
||
|
|
{% else %}
|
||
|
|
- --master=https://{{ groups['kube-master'][0] }}:{{kube_apiserver_port }}
|
||
|
|
- --kubeconfig=/etc/kubernetes/node-kubeconfig.yaml
|
||
|
|
{% endif %}
|
||
|
|
securityContext:
|
||
|
|
privileged: true
|
||
|
|
volumeMounts:
|
||
|
|
- mountPath: /etc/ssl/certs
|
||
|
|
name: ssl-certs-host
|
||
|
|
readOnly: true
|
||
|
|
- mountPath: /etc/kubernetes/node-kubeconfig.yaml
|
||
|
|
name: "kubeconfig"
|
||
|
|
readOnly: true
|
||
|
|
- mountPath: /etc/kubernetes/ssl
|
||
|
|
name: "etc-kube-ssl"
|
||
|
|
readOnly: true
|
||
|
|
volumes:
|
||
|
|
- name: ssl-certs-host
|
||
|
|
hostPath:
|
||
|
|
path: /usr/share/ca-certificates
|
||
|
|
- name: "kubeconfig"
|
||
|
|
hostPath:
|
||
|
|
path: "/etc/kubernetes/node-kubeconfig.yaml"
|
||
|
|
- name: "etc-kube-ssl"
|
||
|
|
hostPath:
|
||
|
|
path: "/etc/kubernetes/ssl"
|