dff78f616e
According to http://kubernetes.io/docs/user-guide/images/ : By default, the kubelet will try to pull each image from the specified registry. However, if the imagePullPolicy property of the container is set to IfNotPresent or Never, then a local\ image is used (preferentially or exclusively, respectively). Use IfNotPresent value to allow images prepared by the download role dependencies to be effectively used by kubelet without pull errors resulting apps to stay blocked in PullBackOff/Error state even when there are images on the localhost exist. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
50 lines
1.3 KiB
Django/Jinja
50 lines
1.3 KiB
Django/Jinja
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: kube-proxy
|
|
namespace: kube-system
|
|
labels:
|
|
k8s-app: kube-proxy
|
|
spec:
|
|
hostNetwork: true
|
|
containers:
|
|
- name: kube-proxy
|
|
image: {{ hyperkube_image_repo }}:{{ hyperkube_image_tag }}
|
|
imagePullPolicy: {{ k8s_image_pull_policy }}
|
|
command:
|
|
- /hyperkube
|
|
- proxy
|
|
- --v={{ kube_log_level | default('2') }}
|
|
- --master={{ kube_apiserver_endpoint }}
|
|
{% if not is_kube_master %}
|
|
- --kubeconfig=/etc/kubernetes/node-kubeconfig.yaml
|
|
{% endif %}
|
|
- --bind-address={{ ip | default(ansible_default_ipv4.address) }}
|
|
- --cluster-cidr={{ kube_pods_subnet }}
|
|
- --proxy-mode={{ kube_proxy_mode }}
|
|
{% if kube_proxy_masquerade_all and kube_proxy_mode == "iptables" %}
|
|
- --masquerade-all
|
|
{% endif %}
|
|
securityContext:
|
|
privileged: true
|
|
volumeMounts:
|
|
- mountPath: /etc/ssl/certs
|
|
name: ssl-certs-host
|
|
readOnly: true
|
|
- mountPath: /etc/kubernetes/node-kubeconfig.yaml
|
|
name: "kubeconfig"
|
|
readOnly: true
|
|
- mountPath: /etc/kubernetes/ssl
|
|
name: "etc-kube-ssl"
|
|
readOnly: true
|
|
volumes:
|
|
- name: ssl-certs-host
|
|
hostPath:
|
|
path: /usr/share/ca-certificates
|
|
- name: "kubeconfig"
|
|
hostPath:
|
|
path: "/etc/kubernetes/node-kubeconfig.yaml"
|
|
- name: "etc-kube-ssl"
|
|
hostPath:
|
|
path: "/etc/kubernetes/ssl"
|