--- apiVersion: v1 kind: ServiceAccount metadata: name: cloud-controller-manager namespace: kube-system --- apiVersion: apps/v1 kind: DaemonSet metadata: name: openstack-cloud-controller-manager namespace: kube-system labels: k8s-app: openstack-cloud-controller-manager spec: selector: matchLabels: k8s-app: openstack-cloud-controller-manager updateStrategy: type: RollingUpdate template: metadata: labels: k8s-app: openstack-cloud-controller-manager spec: nodeSelector: {% if kube_version is version('v1.20.0', '<') %} node-role.kubernetes.io/master: "" {% else %} node-role.kubernetes.io/control-plane: "" {% endif %} securityContext: runAsUser: 999 tolerations: - key: node.cloudprovider.kubernetes.io/uninitialized value: "true" effect: NoSchedule - key: node-role.kubernetes.io/master effect: NoSchedule - key: node-role.kubernetes.io/control-plane effect: NoSchedule serviceAccountName: cloud-controller-manager containers: - name: openstack-cloud-controller-manager image: {{ docker_image_repo }}/k8scloudprovider/openstack-cloud-controller-manager:{{ external_openstack_cloud_controller_image_tag }} args: - /bin/openstack-cloud-controller-manager - --v=1 - --cloud-config=$(CLOUD_CONFIG) - --cloud-provider=openstack - --cluster-name={{ cluster_name }} - --use-service-account-credentials=true - --address=127.0.0.1 {% for key, value in external_openstack_cloud_controller_extra_args.items() %} - "{{ '--' + key + '=' + value }}" {% endfor %} volumeMounts: - mountPath: /etc/kubernetes/pki name: k8s-certs readOnly: true - mountPath: /etc/ssl/certs name: ca-certs readOnly: true - mountPath: /etc/config name: cloud-config-volume readOnly: true {% if external_openstack_cacert is defined and external_openstack_cacert != "" %} - mountPath: {{ kube_config_dir }}/external-openstack-cacert.pem name: openstack-cacert readOnly: true {% endif %} {% if kubelet_flexvolumes_plugins_dir is defined %} - mountPath: /usr/libexec/kubernetes/kubelet-plugins/volume/exec name: flexvolume-dir {% endif %} resources: requests: cpu: 200m env: - name: CLOUD_CONFIG value: /etc/config/cloud.conf hostNetwork: true volumes: {% if kubelet_flexvolumes_plugins_dir is defined %} - hostPath: path: "{{ kubelet_flexvolumes_plugins_dir }}" type: DirectoryOrCreate name: flexvolume-dir {% endif %} - hostPath: path: /etc/kubernetes/pki type: DirectoryOrCreate name: k8s-certs - hostPath: path: /etc/ssl/certs type: DirectoryOrCreate name: ca-certs - name: cloud-config-volume secret: secretName: external-openstack-cloud-config {% if external_openstack_cacert is defined and external_openstack_cacert != "" %} - hostPath: path: {{ kube_config_dir }}/external-openstack-cacert.pem type: FileOrCreate name: openstack-cacert {% endif %}