mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-10-30 22:16:23 -02:30
k8s-infra-cherrypick-robotandAli Afsharzadeh
99086c85bf
With priority only (#13490), the API server rejects the mirror pods and the kubelet does not give the pods the node-critical OOM score. Set both fields, like kubeadm does for its static pods. Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com> Co-authored-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
46 lines
1.4 KiB
Django/Jinja
46 lines
1.4 KiB
Django/Jinja
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: {{ loadbalancer_apiserver_pod_name }}
|
|
namespace: kube-system
|
|
labels:
|
|
addonmanager.kubernetes.io/mode: Reconcile
|
|
k8s-app: kube-haproxy
|
|
annotations:
|
|
haproxy-cfg-checksum: "{{ haproxy_conf.checksum }}"
|
|
spec:
|
|
hostNetwork: true
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
{# Set both, like kubeadm. The kubelet does not resolve priorityClassName for static pods,
|
|
and the API server rejects the mirror pod when priority does not match the class. #}
|
|
priority: 2000001000
|
|
priorityClassName: system-node-critical
|
|
containers:
|
|
- name: haproxy
|
|
image: {{ haproxy_image_repo }}:{{ haproxy_image_tag }}
|
|
imagePullPolicy: {{ k8s_image_pull_policy }}
|
|
resources:
|
|
requests:
|
|
cpu: {{ loadbalancer_apiserver_cpu_requests }}
|
|
memory: {{ loadbalancer_apiserver_memory_requests }}
|
|
{% if loadbalancer_apiserver_healthcheck_port is defined -%}
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: {{ loadbalancer_apiserver_healthcheck_port }}
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: {{ loadbalancer_apiserver_healthcheck_port }}
|
|
{% endif -%}
|
|
volumeMounts:
|
|
- mountPath: /usr/local/etc/haproxy/
|
|
name: etc-haproxy
|
|
readOnly: true
|
|
volumes:
|
|
- name: etc-haproxy
|
|
hostPath:
|
|
path: {{ haproxy_config_dir }}
|