dff78f616e
According to http://kubernetes.io/docs/user-guide/images/ : By default, the kubelet will try to pull each image from the specified registry. However, if the imagePullPolicy property of the container is set to IfNotPresent or Never, then a local\ image is used (preferentially or exclusively, respectively). Use IfNotPresent value to allow images prepared by the download role dependencies to be effectively used by kubelet without pull errors resulting apps to stay blocked in PullBackOff/Error state even when there are images on the localhost exist. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
56 lines
1.9 KiB
Django/Jinja
56 lines
1.9 KiB
Django/Jinja
apiVersion: extensions/v1beta1
|
|
kind: ReplicaSet
|
|
metadata:
|
|
name: calico-policy-controller
|
|
namespace: kube-system
|
|
labels:
|
|
k8s-app: calico-policy
|
|
kubernetes.io/cluster-service: "true"
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
kubernetes.io/cluster-service: "true"
|
|
k8s-app: calico-policy
|
|
template:
|
|
metadata:
|
|
name: calico-policy-controller
|
|
namespace: kube-system
|
|
labels:
|
|
kubernetes.io/cluster-service: "true"
|
|
k8s-app: calico-policy
|
|
spec:
|
|
hostNetwork: true
|
|
containers:
|
|
- name: calico-policy-controller
|
|
image: {{ calico_policy_image_repo }}:{{ calico_policy_image_tag }}
|
|
imagePullPolicy: {{ k8s_image_pull_policy }}
|
|
env:
|
|
- name: ETCD_ENDPOINTS
|
|
value: "{{ etcd_access_endpoint }}"
|
|
- name: ETCD_CA_CERT_FILE
|
|
value: "{{ etcd_cert_dir }}/ca.pem"
|
|
- name: ETCD_CERT_FILE
|
|
value: "{{ etcd_cert_dir }}/node.pem"
|
|
- name: ETCD_KEY_FILE
|
|
value: "{{ etcd_cert_dir }}/node-key.pem"
|
|
# Location of the Kubernetes API - this shouldn't need to be
|
|
# changed so long as it is used in conjunction with
|
|
# CONFIGURE_ETC_HOSTS="true".
|
|
- name: K8S_API
|
|
value: "https://kubernetes.default:443"
|
|
# Configure /etc/hosts within the container to resolve
|
|
# the kubernetes.default Service to the correct clusterIP
|
|
# using the environment provided by the kubelet.
|
|
# This removes the need for KubeDNS to resolve the Service.
|
|
- name: CONFIGURE_ETC_HOSTS
|
|
value: "true"
|
|
volumeMounts:
|
|
- mountPath: {{ etcd_cert_dir }}
|
|
name: etcd-certs
|
|
readOnly: true
|
|
volumes:
|
|
- hostPath:
|
|
path: {{ etcd_cert_dir }}
|
|
name: etcd-certs
|