Kubenretes 1.16.0 api reference change
[ta/caas-kubedns.git] / ansible / roles / kubedns / templates / kubedns-deployment.yml
index d60e692..265295d 100644 (file)
@@ -14,7 +14,7 @@ See the License for the specific language governing permissions and
 limitations under the License.
 #}
 ---
-apiVersion: apps/v1beta2
+apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   name: kube-dns
@@ -35,6 +35,7 @@ spec:
         scheduler.alpha.kubernetes.io/critical-pod: ''
         scheduler.alpha.kubernetes.io/tolerations: '[{"key":"CriticalAddonsOnly", "operator":"Exists"}]'
     spec:
+      priorityClassName: "system-cluster-critical"
       hostNetwork: true
       nodeSelector:
         nodetype: caas_master
@@ -42,6 +43,9 @@ spec:
       - key: "CriticalAddonsOnly"
         operator: "Exists"
       volumes:
+      - name: time-mount
+        hostPath:
+          path: /etc/localtime
       - name: secret
         hostPath:
           path: /etc/kubernetes/ssl
@@ -70,11 +74,11 @@ spec:
           limits:
             memory: 170Mi
           requests:
-            cpu: 100m
+            cpu: 10m
             memory: 70Mi
         livenessProbe:
           tcpSocket:
-            port: 53
+            port: 10053
           initialDelaySeconds: 60
           timeoutSeconds: 5
           successThreshold: 1
@@ -105,7 +109,14 @@ spec:
         - containerPort: 10055
           name: metrics
           protocol: TCP
+        resources:
+          requests:
+            cpu: 10m
+            memory: 70Mi
         volumeMounts:
+        - name: time-mount
+          mountPath: /etc/localtime
+          readOnly: true
         - name: secret
           mountPath: /etc/kubernetes/ssl
           readOnly: true
@@ -152,6 +163,9 @@ spec:
             cpu: 150m
             memory: 20Mi
         volumeMounts:
+        - name: time-mount
+          mountPath: /etc/localtime
+          readOnly: true
         - name: secret
           mountPath: /etc/kubernetes/ssl
           readOnly: true