X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;f=ansible%2Froles%2Fkubedns%2Ftemplates%2Fkubedns-deployment.yml;h=f6b4efa975b829f6523a92b36c999f0bc25a9c46;hb=b829734396262b0158289449d812894cb3624707;hp=d60e692968c3fd03444ee14a9135d4ddc088a900;hpb=a02598697ea8f65aa353ff1029aa5b6734c672b1;p=ta%2Fcaas-kubedns.git

diff --git a/ansible/roles/kubedns/templates/kubedns-deployment.yml b/ansible/roles/kubedns/templates/kubedns-deployment.yml
index d60e692..f6b4efa 100644
--- a/ansible/roles/kubedns/templates/kubedns-deployment.yml
+++ b/ansible/roles/kubedns/templates/kubedns-deployment.yml
@@ -35,6 +35,7 @@ spec:
         scheduler.alpha.kubernetes.io/critical-pod: ''
         scheduler.alpha.kubernetes.io/tolerations: '[{"key":"CriticalAddonsOnly", "operator":"Exists"}]'
     spec:
+      priorityClassName: "system-cluster-critical"
       hostNetwork: true
       nodeSelector:
         nodetype: caas_master
@@ -42,6 +43,9 @@ spec:
       - key: "CriticalAddonsOnly"
         operator: "Exists"
       volumes:
+      - name: time-mount
+        hostPath:
+          path: /etc/localtime
       - name: secret
         hostPath:
           path: /etc/kubernetes/ssl
@@ -70,11 +74,11 @@ spec:
           limits:
             memory: 170Mi
           requests:
-            cpu: 100m
+            cpu: 10m
             memory: 70Mi
         livenessProbe:
           tcpSocket:
-            port: 53
+            port: 10053
           initialDelaySeconds: 60
           timeoutSeconds: 5
           successThreshold: 1
@@ -105,7 +109,14 @@ spec:
         - containerPort: 10055
           name: metrics
           protocol: TCP
+        resources:
+          requests:
+            cpu: 10m
+            memory: 70Mi
         volumeMounts:
+        - name: time-mount
+          mountPath: /etc/localtime
+          readOnly: true
         - name: secret
           mountPath: /etc/kubernetes/ssl
           readOnly: true
@@ -152,6 +163,9 @@ spec:
             cpu: 150m
             memory: 20Mi
         volumeMounts:
+        - name: time-mount
+          mountPath: /etc/localtime
+          readOnly: true
         - name: secret
           mountPath: /etc/kubernetes/ssl
           readOnly: true