apiVersion: v1 kind: Pod metadata: name: kube-scheduler namespace: kube-system labels: k8s-app: kube-scheduler spec: hostNetwork: true containers: - name: kube-scheduler image: {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }} imagePullPolicy: {{ k8s_image_pull_policy }} securityContext: runAsUser: {{ kubelet_user_id }} fsGroup: {{ kubelet_group_id }} supplementalGroups: - {{ kube_cert_group_id }} - {{ etcd_cert_group_id }} capabilities: drop: {% for c in apps_drop_cap %} - {{ c.upper() }} {% endfor %} resources: limits: cpu: {{ kube_scheduler_cpu_limit }} memory: {{ kube_scheduler_memory_limit }} requests: cpu: {{ kube_scheduler_cpu_requests }} memory: {{ kube_scheduler_memory_requests }} command: - /hyperkube - scheduler - --leader-elect=true - --master={{ kube_apiserver_endpoint }} - --v={{ kube_log_level }} livenessProbe: httpGet: host: 127.0.0.1 path: /healthz port: 10251 initialDelaySeconds: 30 timeoutSeconds: 10