mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-22 09:40:34 +00:00
Mike Kolesnik
409c875713
Added a chart for the globalnet controller which uses the global CIDR. Also added the global CIDR to the submariner engine pod env so it can utilize it. The controller will only be deployed if the CIDR is specified.
60 lines
1.9 KiB
YAML
60 lines
1.9 KiB
YAML
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: {{ template "submariner.fullname" . }}-globalnet
|
|
labels:
|
|
heritage: {{ .Release.Service | quote }}
|
|
release: {{ .Release.Name | quote }}
|
|
chart: {{ template "submariner.chart" . }}
|
|
app: {{ template "submariner.fullname" . }}-globalnet
|
|
component: globalnet
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: {{ template "submariner.fullname" . }}-globalnet
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: {{ template "submariner.fullname" . }}-globalnet
|
|
spec:
|
|
hostNetwork: true
|
|
serviceAccountName: submariner-globalnet
|
|
serviceAccount: submariner-globalnet
|
|
nodeSelector:
|
|
{{- if eq .Values.submariner.globalCidr "" }}
|
|
nowhere: 'noplace'
|
|
{{- else }}
|
|
submariner.io/gateway: 'true'
|
|
{{- end }}
|
|
containers:
|
|
- name: {{ template "submariner.fullname" . }}-globalnet
|
|
image: submariner-globalnet:local
|
|
imagePullPolicy: IfNotPresent
|
|
env:
|
|
- name: SUBMARINER_CLUSTERID
|
|
value: '{{ .Values.submariner.clusterId }}'
|
|
- name: SUBMARINER_GLOBALCIDR
|
|
value: '{{ .Values.submariner.globalCidr }}'
|
|
- name: SUBMARINER_EXCLUDENS
|
|
value: 'submariner,kube-system,operators'
|
|
- name: SUBMARINER_NAMESPACE
|
|
value: '{{ .Release.Namespace }}'
|
|
securityContext:
|
|
allowPrivilegeEscalation: true
|
|
capabilities:
|
|
add:
|
|
- ALL
|
|
privileged: true
|
|
readOnlyRootFilesystem: false
|
|
runAsNonRoot: false
|
|
volumeMounts:
|
|
# Because we don't actually run iptables locally, but chroot in to the host
|
|
- mountPath: /host
|
|
name: host-slash
|
|
readOnly: true
|
|
volumes:
|
|
- name: host-slash
|
|
hostPath:
|
|
path: /
|
|
|