kubespray/roles/network_plugin/flannel/templates/flannel-pod.yml

40 lines
1.3 KiB
YAML
Raw Normal View History

2016-01-09 17:45:50 +08:00
---
kind: "Pod"
apiVersion: "v1"
metadata:
name: "flannel"
namespace: "kube-system"
labels:
app: "flannel"
version: "v0.1"
spec:
volumes:
- name: "subnetenv"
hostPath:
path: "/run/flannel"
2016-11-09 18:44:41 +08:00
- name: "etcd-certs"
2016-01-09 17:45:50 +08:00
hostPath:
2016-11-09 18:44:41 +08:00
path: "{{ etcd_cert_dir }}"
2016-01-09 17:45:50 +08:00
containers:
- name: "flannel-container"
image: "{{ flannel_image_repo }}:{{ flannel_image_tag }}"
2016-01-09 17:45:50 +08:00
command:
- "/bin/sh"
- "-c"
2016-11-09 18:44:41 +08:00
- "/opt/bin/flanneld -etcd-endpoints {{ etcd_access_endpoint }} -etcd-prefix /{{ cluster_name }}/network -etcd-cafile {{ etcd_cert_dir }}/ca.pem -etcd-certfile {{ etcd_cert_dir }}/node.pem -etcd-keyfile {{ etcd_cert_dir }}/node-key.pem {% if flannel_interface is defined %}-iface {{ flannel_interface }}{% endif %} {% if flannel_public_ip is defined %}-public-ip {{ flannel_public_ip }}{% endif %}"
2016-01-09 17:45:50 +08:00
ports:
- hostPort: 10253
containerPort: 10253
resources:
limits:
cpu: "100m"
volumeMounts:
- name: "subnetenv"
mountPath: "/run/flannel"
2016-11-09 18:44:41 +08:00
- name: "etcd-certs"
mountPath: "{{ etcd_cert_dir }}"
readOnly: true
2016-01-09 17:45:50 +08:00
securityContext:
privileged: true
hostNetwork: true