mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-10-30 22:16:23 -02:30
MohammadReza
f4eaac3a94
* chore(deps): bump node-feature-discovery to v0.19.0 Checked all intermediate releases (0.17.0, 0.18.0, 0.19.0) for breaking changes. v0.19.0's RBAC breaking change (nfd-topology-updater needs list+watch on pods) does not apply here: Kubespray does not deploy an nfd-topology-updater workload (only an unused ConfigMap template for it exists in this role). v0.19.0 also removed env/expandenv/getHostByName from NodeFeatureRule templates -- only affects user-authored custom NodeFeatureRule resources, not anything this role ships by default. * fix(nfd): add missing namespaces RBAC rule and fix nodefeaturegroups typo * fix(nfd): add missing delete verb to nfd-worker Role * chore(nfd): sync CRD manifest with upstream v0.19.0 * fix(nfd): drop removed gRPC-era flags/ports from nfd-master * fix(nfd): remove leftover crd-controller args block Previous commit added the new args but left the old -crd-controller and -metrics block in place instead of replacing it. * fix(nfd): drop removed gRPC-era flags from nfd-worker * chore(nfd): drop variables no longer read by any template * fix(nfd): align nfd-worker port naming and add health probes * fix(nfd): remove obsolete nfd-master Service * chore(nfd): register removed variables in validate_inventory * fix(nfd): clean up the obsolete Service manifest on disk * fix(nfd): add health probes and http port to nfd-gc * fix(nfd): align nfd-worker env and mounts with upstream
121 lines
3.4 KiB
Django/Jinja
121 lines
3.4 KiB
Django/Jinja
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: node-feature-discovery-worker
|
|
namespace: {{ node_feature_discovery_namespace }}
|
|
labels:
|
|
app.kubernetes.io/name: node-feature-discovery
|
|
role: worker
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: node-feature-discovery
|
|
role: worker
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/name: node-feature-discovery
|
|
role: worker
|
|
spec:
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
serviceAccountName: {{ node_feature_discovery_worker_sa_name }}
|
|
containers:
|
|
- name: worker
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: true
|
|
image: {{ node_feature_discovery_image_repo }}:{{ node_feature_discovery_image_tag }}
|
|
imagePullPolicy: IfNotPresent
|
|
env:
|
|
- name: NODE_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: spec.nodeName
|
|
- name: POD_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.name
|
|
- name: POD_UID
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.uid
|
|
command:
|
|
- "nfd-worker"
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: http
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: http
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
failureThreshold: 10
|
|
ports:
|
|
- name: http
|
|
containerPort: 8080
|
|
volumeMounts:
|
|
- name: host-boot
|
|
mountPath: "/host-boot"
|
|
readOnly: true
|
|
- name: host-os-release
|
|
mountPath: "/host-etc/os-release"
|
|
readOnly: true
|
|
- name: host-sys
|
|
mountPath: "/host-sys"
|
|
readOnly: true
|
|
- name: host-proc-swaps
|
|
mountPath: "/host-proc/swaps"
|
|
readOnly: true
|
|
- name: host-usr-lib
|
|
mountPath: "/host-usr/lib"
|
|
readOnly: true
|
|
- name: host-lib
|
|
mountPath: "/host-lib"
|
|
readOnly: true
|
|
- name: features-d
|
|
mountPath: "/etc/kubernetes/node-feature-discovery/features.d/"
|
|
readOnly: true
|
|
- name: nfd-worker-conf
|
|
mountPath: "/etc/kubernetes/node-feature-discovery"
|
|
readOnly: true
|
|
volumes:
|
|
- name: host-boot
|
|
hostPath:
|
|
path: "/boot"
|
|
- name: host-os-release
|
|
hostPath:
|
|
path: "/etc/os-release"
|
|
- name: host-sys
|
|
hostPath:
|
|
path: "/sys"
|
|
- name: host-proc-swaps
|
|
hostPath:
|
|
path: "/proc/swaps"
|
|
- name: host-usr-lib
|
|
hostPath:
|
|
path: "/usr/lib"
|
|
- name: host-lib
|
|
hostPath:
|
|
path: "/lib"
|
|
- name: features-d
|
|
hostPath:
|
|
path: "/etc/kubernetes/node-feature-discovery/features.d/"
|
|
- name: nfd-worker-conf
|
|
configMap:
|
|
name: node-feature-discovery-worker-conf
|
|
items:
|
|
- key: nfd-worker.conf
|
|
path: nfd-worker.conf
|
|
{% if node_feature_discovery_worker_tolerations %}
|
|
tolerations:
|
|
{{ node_feature_discovery_worker_tolerations | to_yaml(indent=2, width=1337) | indent(width=8) }}
|
|
{% endif %}
|