b7692fad09
* Add an option to deploy K8s app to test e2e network connectivity and cluster DNS resolve via Kubedns for nethost/simple pods (defaults to false). * Parametrize existing k8s apps templates with kube_namespace and kube_config_dir instead of hardcode. * For CoreOS, ensure nameservers from inventory to be put in the first place to allow hostnet pods connectivity via short names or FQDN and hostnet agents to pass as well, if netchecker deployed. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
56 lines
1.9 KiB
Django/Jinja
56 lines
1.9 KiB
Django/Jinja
apiVersion: extensions/v1beta1
|
|
kind: ReplicaSet
|
|
metadata:
|
|
name: calico-policy-controller
|
|
namespace: {{ kube_namespace }}
|
|
labels:
|
|
k8s-app: calico-policy
|
|
kubernetes.io/cluster-service: "true"
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
kubernetes.io/cluster-service: "true"
|
|
k8s-app: calico-policy
|
|
template:
|
|
metadata:
|
|
name: calico-policy-controller
|
|
namespace: kube-system
|
|
labels:
|
|
kubernetes.io/cluster-service: "true"
|
|
k8s-app: calico-policy
|
|
spec:
|
|
hostNetwork: true
|
|
containers:
|
|
- name: calico-policy-controller
|
|
image: {{ calico_policy_image_repo }}:{{ calico_policy_image_tag }}
|
|
imagePullPolicy: {{ k8s_image_pull_policy }}
|
|
env:
|
|
- name: ETCD_ENDPOINTS
|
|
value: "{{ etcd_access_endpoint }}"
|
|
- name: ETCD_CA_CERT_FILE
|
|
value: "{{ etcd_cert_dir }}/ca.pem"
|
|
- name: ETCD_CERT_FILE
|
|
value: "{{ etcd_cert_dir }}/node.pem"
|
|
- name: ETCD_KEY_FILE
|
|
value: "{{ etcd_cert_dir }}/node-key.pem"
|
|
# Location of the Kubernetes API - this shouldn't need to be
|
|
# changed so long as it is used in conjunction with
|
|
# CONFIGURE_ETC_HOSTS="true".
|
|
- name: K8S_API
|
|
value: "https://kubernetes.default:443"
|
|
# Configure /etc/hosts within the container to resolve
|
|
# the kubernetes.default Service to the correct clusterIP
|
|
# using the environment provided by the kubelet.
|
|
# This removes the need for KubeDNS to resolve the Service.
|
|
- name: CONFIGURE_ETC_HOSTS
|
|
value: "true"
|
|
volumeMounts:
|
|
- mountPath: {{ etcd_cert_dir }}
|
|
name: etcd-certs
|
|
readOnly: true
|
|
volumes:
|
|
- hostPath:
|
|
path: {{ etcd_cert_dir }}
|
|
name: etcd-certs
|