provisioning-catalog/components/fip_controller/cluster/templates/daemonset.yaml.j2

37 lines
1.2 KiB
Django/Jinja

apiVersion: apps/v1
kind: DaemonSet
metadata:
name: fip-alias-agent
namespace: {{ taskserv.alias_agent_namespace }}
labels:
app.kubernetes.io/name: fip-alias-agent
app.kubernetes.io/managed-by: provisioning
spec:
selector:
matchLabels:
app.kubernetes.io/name: fip-alias-agent
template:
metadata:
labels:
app.kubernetes.io/name: fip-alias-agent
app.kubernetes.io/managed-by: provisioning
spec:
# hostNetwork: shared host network namespace — ip addr commands affect the host eth0 directly.
hostNetwork: true
# No nodeSelector: the alias-agent image is multi-arch (digest-pinned) and
# must run on every node — incl. amd64 wrk-2 — so a FIP can be aliased
# wherever it homes. node_selector fences the controller only (see deployment).
tolerations:
- operator: Exists
containers:
- name: agent
image: {{ taskserv.alias_agent_image }}:{{ taskserv.alias_agent_image_tag }}
securityContext:
privileged: true
resources:
requests:
cpu: "5m"
memory: "8Mi"
limits:
cpu: "50m"
memory: "32Mi"