Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
87 changes: 44 additions & 43 deletions config/manager/manager.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -18,53 +18,54 @@ spec:
controller-tools.k8s.io: "1.0"
spec:
containers:
- command:
- /manager
args:
- "--webhook-port=9443"
- "--diagnostics-address=${IPAM_DIAGNOSTICS_ADDRESS:=:8443}"
- "--insecure-diagnostics=${IPAM_INSECURE_DIAGNOSTICS:=false}"
image: controller:latest
imagePullPolicy: IfNotPresent
name: manager
env:
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
ports:
- containerPort: 9440
name: healthz
protocol: TCP
- containerPort: 8443
name: metrics
protocol: TCP
readinessProbe:
httpGet:
path: /readyz
port: healthz
livenessProbe:
httpGet:
path: /healthz
port: healthz
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
runAsUser: 65532
runAsGroup: 65532
- command:
- /manager
args:
- "--webhook-port=9443"
- "--diagnostics-address=${IPAM_DIAGNOSTICS_ADDRESS:=:8443}"
- "--insecure-diagnostics=${IPAM_INSECURE_DIAGNOSTICS:=false}"
image: controller:latest
imagePullPolicy: IfNotPresent
name: manager
env:
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
ports:
- containerPort: 9440
name: healthz
protocol: TCP
- containerPort: 8443
name: metrics
protocol: TCP
readinessProbe:
httpGet:
path: /readyz
port: healthz
livenessProbe:
httpGet:
path: /healthz
port: healthz
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
runAsUser: 65532
runAsGroup: 65532
terminationMessagePolicy: FallbackToLogsOnError
terminationGracePeriodSeconds: 10
securityContext:
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
serviceAccountName: manager
tolerations:
# TODO (fmuyassarov): remove node-role.kubernetes.io/master
# taint before moving to k8s v1.24
- effect: NoSchedule
key: node-role.kubernetes.io/master
- effect: NoSchedule
key: node-role.kubernetes.io/control-plane
# TODO (fmuyassarov): remove node-role.kubernetes.io/master
# taint before moving to k8s v1.24
- effect: NoSchedule
key: node-role.kubernetes.io/master
- effect: NoSchedule
key: node-role.kubernetes.io/control-plane