6e1c0cdd15
* Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
44 lines
1.6 KiB
YAML
44 lines
1.6 KiB
YAML
---
|
|
kind: "Pod"
|
|
apiVersion: "v1"
|
|
metadata:
|
|
name: "flannel"
|
|
namespace: "{{system_namespace}}"
|
|
labels:
|
|
app: "flannel"
|
|
version: "v0.1"
|
|
spec:
|
|
volumes:
|
|
- name: "subnetenv"
|
|
hostPath:
|
|
path: "/run/flannel"
|
|
- name: "etcd-certs"
|
|
hostPath:
|
|
path: "{{ etcd_cert_dir }}"
|
|
containers:
|
|
- name: "flannel-container"
|
|
image: "{{ flannel_image_repo }}:{{ flannel_image_tag }}"
|
|
imagePullPolicy: {{ k8s_image_pull_policy }}
|
|
resources:
|
|
limits:
|
|
cpu: {{ flannel_cpu_limit }}
|
|
memory: {{ flannel_memory_limit }}
|
|
requests:
|
|
cpu: {{ flannel_cpu_requests }}
|
|
memory: {{ flannel_memory_requests }}
|
|
command:
|
|
- "/bin/sh"
|
|
- "-c"
|
|
- "/opt/bin/flanneld -etcd-endpoints {{ etcd_access_endpoint }} -etcd-prefix /{{ cluster_name }}/network -etcd-cafile {{ etcd_cert_dir }}/ca.pem -etcd-certfile {{ etcd_cert_dir }}/node-{{ inventory_hostname }}.pem -etcd-keyfile {{ etcd_cert_dir }}/node-{{ inventory_hostname }}-key.pem {% if flannel_interface is defined %}-iface {{ flannel_interface }}{% endif %} {% if flannel_public_ip is defined %}-public-ip {{ flannel_public_ip }}{% endif %}"
|
|
ports:
|
|
- hostPort: 10253
|
|
containerPort: 10253
|
|
volumeMounts:
|
|
- name: "subnetenv"
|
|
mountPath: "/run/flannel"
|
|
- name: "etcd-certs"
|
|
mountPath: "{{ etcd_cert_dir }}"
|
|
readOnly: true
|
|
securityContext:
|
|
privileged: true
|
|
hostNetwork: true
|