mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-21 22:00:35 +00:00
Sridhar GaddamandGitHub
7cc50b03d3
In one of the earlier PRs, we modified the terminationGracePeriodSeconds to 10 secs. However, its seen that this is causing more CI failures during e2e redundancy tests. Ideally, once the Pods are terminated, it should cleanup itself ASAP but it is seen that SM Pods are sometimes taking time to exit and during this Period since there is no active SM Pod running, this is triggering some failures. Until we figure out the exact reason why the Pods are taking time for cleanup, this PR reduces the terminationGracePeriodSeconds. This issue would be properly addressed via https://github.com/submariner-io/submariner/issues/694 Signed-Off-by: Sridhar Gaddam <sgaddam@redhat.com>
60 lines
1.9 KiB
YAML
60 lines
1.9 KiB
YAML
{{- if ne .Values.submariner.globalCidr "" }}
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: {{ template "submariner.fullname" . }}-globalnet
|
|
labels:
|
|
heritage: {{ .Release.Service | quote }}
|
|
release: {{ .Release.Name | quote }}
|
|
chart: {{ template "submariner.chart" . }}
|
|
app: {{ template "submariner.fullname" . }}-globalnet
|
|
component: globalnet
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: {{ template "submariner.fullname" . }}-globalnet
|
|
updateStrategy:
|
|
rollingUpdate:
|
|
maxUnavailable: 1
|
|
type: RollingUpdate
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: {{ template "submariner.fullname" . }}-globalnet
|
|
spec:
|
|
hostNetwork: true
|
|
serviceAccountName: submariner-globalnet
|
|
serviceAccount: submariner-globalnet
|
|
terminationGracePeriodSeconds: 2
|
|
nodeSelector:
|
|
submariner.io/gateway: 'true'
|
|
containers:
|
|
- name: {{ template "submariner.fullname" . }}-globalnet
|
|
image: {{ .Values.globalnet.image.repository }}:{{ default .Chart.AppVersion .Values.globalnet.image.tag }}
|
|
imagePullPolicy: {{ .Values.globalnet.image.pullPolicy }}
|
|
env:
|
|
- name: SUBMARINER_CLUSTERID
|
|
value: '{{ .Values.submariner.clusterId }}'
|
|
- name: SUBMARINER_EXCLUDENS
|
|
value: 'submariner-operator,kube-system,operators'
|
|
- name: SUBMARINER_NAMESPACE
|
|
value: '{{ .Release.Namespace }}'
|
|
securityContext:
|
|
allowPrivilegeEscalation: true
|
|
capabilities:
|
|
add:
|
|
- ALL
|
|
privileged: true
|
|
readOnlyRootFilesystem: false
|
|
runAsNonRoot: false
|
|
volumeMounts:
|
|
# Because we don't actually run iptables locally, but chroot in to the host
|
|
- mountPath: /host
|
|
name: host-slash
|
|
readOnly: true
|
|
volumes:
|
|
- name: host-slash
|
|
hostPath:
|
|
path: /
|
|
{{- end }}
|