kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/roles/dnsmasq/templates/dnsmasq-deploy.yml.j2

74 lines
2.1 KiB
Plaintext
Raw Normal View History

Use dnsmasq inside pods
2016-03-18 22:07:33 +08:00
---
apiVersion: extensions/v1beta1
Add autoscalers for dnsmasq and kubedns By default kubedns and dnsmasq scale when installed. Dnsmasq is no longer a daemonset. It is now a deployment. Kubedns is no longer a replicationcluster. It is now a deployment. Minimum replicas is two (to enable rolling updates). Reduced memory erquirements for dnsmasq and kubedns
2017-02-28 22:56:00 +08:00
kind: Deployment
Use dnsmasq inside pods
2016-03-18 22:07:33 +08:00
metadata:
name: dnsmasq
Stop templating kube-system namespace and creating it (#2545) Kubernetes makes this namespace automatically, so there is no need for kubespray to manage it.
2018-03-30 19:29:13 +08:00
namespace: "kube-system"
Use dnsmasq inside pods
2016-03-18 22:07:33 +08:00
labels:
k8s-app: dnsmasq
Add autoscalers for dnsmasq and kubedns By default kubedns and dnsmasq scale when installed. Dnsmasq is no longer a daemonset. It is now a deployment. Kubedns is no longer a replicationcluster. It is now a deployment. Minimum replicas is two (to enable rolling updates). Reduced memory erquirements for dnsmasq and kubedns
2017-02-28 22:56:00 +08:00
kubernetes.io/cluster-service: "true"
Use dnsmasq inside pods
2016-03-18 22:07:33 +08:00
spec:
Add autoscalers for dnsmasq and kubedns By default kubedns and dnsmasq scale when installed. Dnsmasq is no longer a daemonset. It is now a deployment. Kubedns is no longer a replicationcluster. It is now a deployment. Minimum replicas is two (to enable rolling updates). Reduced memory erquirements for dnsmasq and kubedns
2017-02-28 22:56:00 +08:00
replicas: {{ dnsmasq_min_replicas }}
selector:
matchLabels:
k8s-app: dnsmasq
Use checksum of dnsmasq config to trigger updates of dnsmasq Allows config changes made by Ansible to restart dnsmasq deployment
2017-03-22 18:02:39 +08:00
strategy:
type: "Recreate"
Use dnsmasq inside pods
2016-03-18 22:07:33 +08:00
template:
metadata:
labels:
k8s-app: dnsmasq
Add autoscalers for dnsmasq and kubedns By default kubedns and dnsmasq scale when installed. Dnsmasq is no longer a daemonset. It is now a deployment. Kubedns is no longer a replicationcluster. It is now a deployment. Minimum replicas is two (to enable rolling updates). Reduced memory erquirements for dnsmasq and kubedns
2017-02-28 22:56:00 +08:00
kubernetes.io/cluster-service: "true"
rename almost all mentions of kargo
2017-06-17 01:25:46 +08:00
kubespray/dnsmasq-checksum: "{{ dnsmasq_stat.stat.checksum }}"
Use dnsmasq inside pods
2016-03-18 22:07:33 +08:00
spec:
Fix ansible syntax to avoid ansible deprecation warnings (#3512) * failed * version_compare * succeeded * skipped * success * version_compare becomes version since ansible 2.5 * ansible minimal version updated in doc and spec * last version_compare
2018-10-17 06:33:30 +08:00
{% if kube_version is version('v1.11.1', '>=') %}
Adding pod priority for all the components. (#3361) * Changes to assign pod priority to kube components. * Removed the boolean flag pod_priority_assignment * Created new priorityclass k8s-cluster-critical * Created new priorityclass k8s-cluster-critical * Fixed the trailing spaces * Fixed the trailing spaces * Added kube version check while creating Priority Class k8s-cluster-critical * Moved k8s-cluster-critical.yml * Moved k8s-cluster-critical.yml to kube_config_dir
2018-09-25 22:50:22 +08:00
priorityClassName: system-cluster-critical
{% endif %}
Enable scheduling of critical pods and network plugins on master Added toleration to DNS, netchecker, fluentd, canal, and calico policy. Also small fixes to make yamllint pass.
2017-08-24 17:04:25 +08:00
tolerations:
- effect: NoSchedule
operator: Exists
ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version remove empty when line ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version force kubeadm upgrade due to failure without --force flag ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version added nodeSelector to have compatibility with hybrid cluster with win nodes, also fix for download with missing container type fixes in syntax and LF for newline in files fix on yamllint check ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version some cleanup for innecesary lines remove conditions for nodeselector
2018-06-05 19:15:20 +08:00
# When having win nodes in cluster without this patch, this pod cloud try to be created in windows
nodeSelector:
beta.kubernetes.io/os: linux
Use dnsmasq inside pods
2016-03-18 22:07:33 +08:00
containers:
- name: dnsmasq
Parameterize several dependency endpoints so that they can be overridden with internal mirrors. Signed-off-by: Chad Swenson <chadswen@gmail.com>
2016-10-15 05:46:44 +08:00
image: "{{ dnsmasq_image_repo }}:{{ dnsmasq_image_tag }}"
Allow pre-downloaded images to be used effectively According to http://kubernetes.io/docs/user-guide/images/ : By default, the kubelet will try to pull each image from the specified registry. However, if the imagePullPolicy property of the container is set to IfNotPresent or Never, then a local\ image is used (preferentially or exclusively, respectively). Use IfNotPresent value to allow images prepared by the download role dependencies to be effectively used by kubelet without pull errors resulting apps to stay blocked in PullBackOff/Error state even when there are images on the localhost exist. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-22 23:16:04 +08:00
imagePullPolicy: {{ k8s_image_pull_policy }}
Use dnsmasq inside pods
2016-03-18 22:07:33 +08:00
command:
- dnsmasq
args:
- -k
Explicitly set config path for DNSMasq When DNSMasq is configured to read its settings from a folder ('-7' or '--conf-dir' option) it only checks that the directory exists and doesn't fail if it's empty. It could lead to a situation when DNSMasq is running and handles requests, but not properly configured, so some of queries can't be resolved.
2017-01-20 18:56:26 +08:00
- -C
- /etc/dnsmasq.d/01-kube-dns.conf
Use dnsmasq inside pods
2016-03-18 22:07:33 +08:00
securityContext:
capabilities:
add:
- NET_ADMIN
resources:
limits:
Tune dnsmasq/kubedns limits, replicas, logging * Add dns_replicas, dns_memory/cpu_limit/requests vars for dns related apps. * When kube_log_level=4, log dnsmasq queries as well. * Add log level control for skydns (part of kubedns app). * Add limits/requests vars for dnsmasq (part of kubedns app) and dnsmasq daemon set. * Drop string defaults for kube_log_level as it is int and is defined in the global vars as well. * Add docs Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-25 18:33:39 +08:00
cpu: {{ dns_cpu_limit }}
memory: {{ dns_memory_limit }}
requests:
cpu: {{ dns_cpu_requests }}
memory: {{ dns_memory_requests }}
Use dnsmasq inside pods
2016-03-18 22:07:33 +08:00
ports:
- name: dns
containerPort: 53
protocol: UDP
- name: dns-tcp
containerPort: 53
protocol: TCP
volumeMounts:
- name: etcdnsmasqd
mountPath: /etc/dnsmasq.d
- name: etcdnsmasqdavailable
mountPath: /etc/dnsmasq.d-available
volumes:
- name: etcdnsmasqd
hostPath:
path: /etc/dnsmasq.d
- name: etcdnsmasqdavailable
hostPath:
path: /etc/dnsmasq.d-available
Make dnsmasq daemon set optional Change additional dnsmasq opts: - Adjust caching size and TTL - Disable resolve conf to not create loops - Change dnsPolicy to default (similarly to kubedns's dnsmasq). The ClusterFirst should not be used to not create loops - Disable negative NXDOMAIN replies to be cached - Make its very installation as optional step (enabled by default). If you don't want more than 3 DNS servers, including 1 for K8s, disable it. - Add docs and a drawing to clarify DNS setup. - Fix stdout logs for dnsmasq/kubedns app configs - Add missed notifies to resolvconf -u handler - Fix idempotency of resolvconf head file changes Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-23 01:14:51 +08:00
dnsPolicy: Default # Don't use cluster DNS.