mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-22 02:40:35 +00:00
Miguel Angel Ajo PelayoandGitHub
3b44f11749
* Update versioning and image repositories Update helm charts to follow the submariner versioning, and include the image repositories by default. Signed-off-by: Miguel Angel Ajo <majopela@redhat.com> * Update final version Signed-off-by: Miguel Angel Ajo Pelayo <majopela@redhat.com>
56 lines
1.9 KiB
YAML
56 lines
1.9 KiB
YAML
{{- if ne .Values.submariner.globalCidr "" }}
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: {{ template "submariner.fullname" . }}-globalnet
|
|
labels:
|
|
heritage: {{ .Release.Service | quote }}
|
|
release: {{ .Release.Name | quote }}
|
|
chart: {{ template "submariner.chart" . }}
|
|
app: {{ template "submariner.fullname" . }}-globalnet
|
|
component: globalnet
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: {{ template "submariner.fullname" . }}-globalnet
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: {{ template "submariner.fullname" . }}-globalnet
|
|
spec:
|
|
hostNetwork: true
|
|
serviceAccountName: submariner-globalnet
|
|
serviceAccount: submariner-globalnet
|
|
terminationGracePeriodSeconds: 10
|
|
nodeSelector:
|
|
submariner.io/gateway: 'true'
|
|
containers:
|
|
- name: {{ template "submariner.fullname" . }}-globalnet
|
|
image: {{ .Values.globalnet.image.repository }}:{{ default .Chart.AppVersion .Values.globalnet.image.tag }}
|
|
imagePullPolicy: {{ .Values.globalnet.image.pullPolicy }}
|
|
env:
|
|
- name: SUBMARINER_CLUSTERID
|
|
value: '{{ .Values.submariner.clusterId }}'
|
|
- name: SUBMARINER_EXCLUDENS
|
|
value: 'submariner-operator,kube-system,operators'
|
|
- name: SUBMARINER_NAMESPACE
|
|
value: '{{ .Release.Namespace }}'
|
|
securityContext:
|
|
allowPrivilegeEscalation: true
|
|
capabilities:
|
|
add:
|
|
- ALL
|
|
privileged: true
|
|
readOnlyRootFilesystem: false
|
|
runAsNonRoot: false
|
|
volumeMounts:
|
|
# Because we don't actually run iptables locally, but chroot in to the host
|
|
- mountPath: /host
|
|
name: host-slash
|
|
readOnly: true
|
|
volumes:
|
|
- name: host-slash
|
|
hostPath:
|
|
path: /
|
|
{{- end }}
|