ansible/roles/kube_proxy/templates/kube-proxy.yml

   1 {#
   2 Copyright 2019 Nokia
   3
   4 Licensed under the Apache License, Version 2.0 (the "License");
   5 you may not use this file except in compliance with the License.
   6 You may obtain a copy of the License at
   7
   8     http://www.apache.org/licenses/LICENSE-2.0
   9
  10 Unless required by applicable law or agreed to in writing, software
  11 distributed under the License is distributed on an "AS IS" BASIS,
  12 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 See the License for the specific language governing permissions and
  14 limitations under the License.
  15 #}
  16 ---
  17 apiVersion: v1
  18 kind: Pod
  19 metadata:
  20   name: kube-proxy
  21   namespace: kube-system
  22 spec:
  23   hostNetwork: true
  24   containers:
  25     - name: kube-proxy
  26       image: {{ container_image_names | select('search', '/hyperkube') | list | last }}
  27       securityContext:
  28         privileged: true
  29       command:
  30         - "/kube-proxy"
  31         - "--kubeconfig=/etc/kubernetes/kubeconfig/proxyc.yml"
  32         - "--hostname-override={{ ansible_host }}"
  33         - "--masquerade-all=true"
  34       volumeMounts:
  35         - name: secret-kubernetes
  36           mountPath: /etc/kubernetes/ssl
  37           readOnly: true
  38         - name: secret-root-ca
  39           mountPath: /etc/openssl/ca.pem
  40           readOnly: true
  41         - name: kubeconfig
  42           mountPath: /etc/kubernetes/kubeconfig
  43           readOnly: true
  44   volumes:
  45     - name: secret-kubernetes
  46       hostPath:
  47         path: /etc/kubernetes/ssl
  48     - name: secret-root-ca
  49       hostPath:
  50         path: /etc/openssl/ca.pem
  51     - name: kubeconfig
  52       hostPath:
  53         path: /etc/kubernetes/kubeconfig