mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-21 11:30:34 +00:00
Sridhar Gaddam
d4a0bc4d15
Currently, the Submariner Engine is a deployment with nodeSelector (for submariner.io/gateway=true). It is seen that when the label is removed from the node after SM engine is deployed, SM engine continues to run on that node. This behavior is not in Sync with the DaemonSet (used by GlobalnetController) behavior where the POD is immediately terminated when the label is removed from the node. This PR updates SM engine as DaemonSet so that we have consistent behavior between the SM Engine POD and GlobalnetController POD. Signed-off-by: Sridhar Gaddam <sgaddam@redhat.com>
127 lines
4.1 KiB
YAML
127 lines
4.1 KiB
YAML
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
labels:
|
|
heritage: {{ .Release.Service | quote }}
|
|
release: {{ .Release.Name | quote }}
|
|
chart: {{ template "submariner.chart" . }}
|
|
app: {{ template "submariner.fullname" . }}-engine
|
|
component: engine
|
|
name: {{ template "submariner.fullname" . }}
|
|
spec:
|
|
revisionHistoryLimit: 5
|
|
selector:
|
|
matchLabels:
|
|
app: {{ template "submariner.fullname" . }}-engine
|
|
strategy:
|
|
rollingUpdate:
|
|
maxUnavailable: 1
|
|
type: RollingUpdate
|
|
template:
|
|
metadata:
|
|
creationTimestamp: null
|
|
labels:
|
|
app: {{ template "submariner.fullname" . }}-engine
|
|
spec:
|
|
affinity:
|
|
podAntiAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
- labelSelector:
|
|
matchExpressions:
|
|
- key: app
|
|
operator: In
|
|
values:
|
|
- {{ template "submariner.fullname" . }}-engine
|
|
topologyKey: "kubernetes.io/hostname"
|
|
{{- with .Values.engine.affinity }}
|
|
{{ toYaml . | indent 8 }}
|
|
{{- end }}
|
|
nodeSelector:
|
|
{{- if .Values.engine.nodeSelectorEnabled }}
|
|
submariner.io/gateway: "true"
|
|
{{- end }}
|
|
{{- with .Values.engine.nodeSelector }}
|
|
{{ toYaml . | indent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.engine.tolerations }}
|
|
tolerations:
|
|
{{ toYaml . | indent 8 }}
|
|
{{- end }}
|
|
containers:
|
|
- command:
|
|
- submariner.sh
|
|
env:
|
|
- name: SUBMARINER_NAMESPACE
|
|
value: "{{ .Release.Namespace }}"
|
|
- name: SUBMARINER_CLUSTERCIDR
|
|
value: "{{ .Values.submariner.clusterCidr }}"
|
|
- name: SUBMARINER_SERVICECIDR
|
|
value: "{{ .Values.submariner.serviceCidr }}"
|
|
- name: SUBMARINER_GLOBALCIDR
|
|
value: "{{ .Values.submariner.globalCidr }}"
|
|
- name: SUBMARINER_TOKEN
|
|
value: "{{ .Values.submariner.apiToken }}"
|
|
- name: SUBMARINER_CLUSTERID
|
|
value: "{{ .Values.submariner.clusterId }}"
|
|
- name: SUBMARINER_COLORCODES
|
|
value: "{{ .Values.submariner.colorCodes }}"
|
|
- name: SUBMARINER_DEBUG
|
|
value: "{{ .Values.submariner.debug }}"
|
|
- name: SUBMARINER_NATENABLED
|
|
value: "{{ .Values.submariner.natEnabled }}"
|
|
- name: SUBMARINER_BROKER
|
|
value: "{{ .Values.broker.type }}"
|
|
{{- if eq .Values.broker.type "phpapi" }}
|
|
- name: BROKER_PHPAPI_PROTO
|
|
value: "{{ .Values.broker.proto }}"
|
|
- name: BROKER_PHPAPI_SERVER
|
|
value: "{{ .Values.broker.server }}"
|
|
{{- end }}
|
|
{{- if eq .Values.broker.type "k8s" }}
|
|
- name: BROKER_K8S_APISERVER
|
|
value: "{{ .Values.broker.server }}"
|
|
- name: BROKER_K8S_APISERVERTOKEN
|
|
value: "{{ .Values.broker.token }}"
|
|
- name: BROKER_K8S_REMOTENAMESPACE
|
|
value: "{{ .Values.broker.namespace }}"
|
|
{{- if .Values.broker.insecure }}
|
|
- name: BROKER_K8S_INSECURE
|
|
value: "true"
|
|
{{- else }}
|
|
- name: BROKER_K8S_CA
|
|
value: "{{ .Values.broker.ca }}"
|
|
{{- end }}
|
|
{{- end }}
|
|
- name: CE_IPSEC_PSK
|
|
value: "{{ .Values.ipsec.psk }}"
|
|
- name: CE_IPSEC_DEBUG
|
|
value: "{{ .Values.ipsec.debug }}"
|
|
- name: CE_IPSEC_IKEPORT
|
|
value: "{{ .Values.ipsec.ikePort }}"
|
|
- name: CE_IPSEC_NATTPORT
|
|
value: "{{ .Values.ipsec.natPort }}"
|
|
image: {{ .Values.engine.image.repository }}:{{ .Values.engine.image.tag }}
|
|
imagePullPolicy: {{ .Values.engine.image.pullPolicy }}
|
|
name: submariner
|
|
resources:
|
|
{{ toYaml .Values.engine.resources | indent 10 }}
|
|
securityContext:
|
|
allowPrivilegeEscalation: true
|
|
capabilities:
|
|
add:
|
|
- ALL
|
|
privileged: true
|
|
readOnlyRootFilesystem: false
|
|
runAsNonRoot: false
|
|
stdin: true
|
|
terminationMessagePath: /dev/termination-log
|
|
terminationMessagePolicy: File
|
|
tty: true
|
|
dnsPolicy: ClusterFirst
|
|
hostNetwork: true
|
|
restartPolicy: Always
|
|
schedulerName: default-scheduler
|
|
securityContext: {}
|
|
terminationGracePeriodSeconds: 0
|
|
serviceAccountName: {{ template "submariner.engineServiceAccountName" . }}
|