X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;ds=sidebyside;f=ansible%2Froles%2Fkube_proxy%2Ftemplates%2Fkube-proxy.yml;h=21ad2b6c8b4089a3ca7f6ecb09f9675835e0fda1;hb=55ac8440e014cf56620965ff7c0e7ae3da29e901;hp=5aff9ad4a89240008903b266c73162dfd6e9ecd4;hpb=8321feb501701dcb4023e3c052cb6a982d5db3fa;p=ta%2Fcaas-kubernetes.git

diff --git a/ansible/roles/kube_proxy/templates/kube-proxy.yml b/ansible/roles/kube_proxy/templates/kube-proxy.yml
index 5aff9ad..21ad2b6 100644
--- a/ansible/roles/kube_proxy/templates/kube-proxy.yml
+++ b/ansible/roles/kube_proxy/templates/kube-proxy.yml
@@ -29,9 +29,16 @@ spec:
       command:
         - "/kube-proxy"
         - "--kubeconfig=/etc/kubernetes/kubeconfig/proxyc.yml"
-        - "--hostname-override={{ ansible_host }}"
+        - "--bind-address={{ networking.infra_internal.ip }}"
+        - "--hostname-override={{ networking.infra_internal.ip }}"
         - "--masquerade-all=true"
+      resources:
+        requests:
+          cpu: "10m"
       volumeMounts:
+        - name: time-mount
+          mountPath: /etc/localtime
+          readOnly: true
         - name: secret-kubernetes
           mountPath: /etc/kubernetes/ssl
           readOnly: true
@@ -42,6 +49,9 @@ spec:
           mountPath: /etc/kubernetes/kubeconfig
           readOnly: true
   volumes:
+    - name: time-mount
+      hostPath:
+        path: /etc/localtime
     - name: secret-kubernetes
       hostPath:
         path: /etc/kubernetes/ssl