X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;f=ansible%2Froles%2Fregistry%2Ftemplates%2Fupdate%2Fdocker-registry-update.yml;h=d499c4c2a7cf4245e761009438bf0d8417ffa977;hb=85d00249cd7fd51320c736851b40844bb54fbd3c;hp=39b0ce9800e613b9d52209f53763e97a33306048;hpb=2ed671c54dad28dd81763928b28cd17d5c76df66;p=ta%2Fcaas-registry.git

diff --git a/ansible/roles/registry/templates/update/docker-registry-update.yml b/ansible/roles/registry/templates/update/docker-registry-update.yml
index 39b0ce9..d499c4c 100644
--- a/ansible/roles/registry/templates/update/docker-registry-update.yml
+++ b/ansible/roles/registry/templates/update/docker-registry-update.yml
@@ -14,7 +14,7 @@ See the License for the specific language governing permissions and
 limitations under the License.
 #}
 ---
-apiVersion: apps/v1beta2
+apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   name: registry-update
@@ -25,19 +25,18 @@ spec:
       name: registry-update
   template:
     metadata:
-      annotations:
-        danm.k8s.io/interfaces: |
-          [
-            {
-              "network":"flannel"
-            }
-          ]
       labels:
         name: registry-update
     spec:
+      priorityClassName: "system-cluster-critical"
       dnsPolicy: ClusterFirst
       nodeSelector:
-        nodename: caas_master1
+        nodetype: caas_master
+      tolerations:
+      - key: "node-maintenancemode"
+        value: "enabled"
+        operator: "Equal"
+        effect: "NoExecute"
       securityContext:
         runAsUser: {{ caas.uid.dockerreg }}
       containers:
@@ -50,7 +49,13 @@ spec:
               value: "{{ caas.update_registry_port }}"
             - name: REGISTRY_CONFIG
               value: /etc/docker-registry/docker-registry-update-config.yml
+          resources:
+            requests:
+              cpu: "10m"
           volumeMounts:
+            - name: time-mount
+              mountPath: /etc/localtime
+              readOnly: true
             - name: config
               mountPath: /etc/docker-registry/
               readOnly: true
@@ -60,6 +65,9 @@ spec:
               mountPath: /etc/ssl/certs/
               readOnly: true
       volumes:
+        - name: time-mount
+          hostPath:
+            path: /etc/localtime
         - name: config
           hostPath:
             path: /etc/docker-update-registry/