55 lines
1.3 KiB
YAML
55 lines
1.3 KiB
YAML
---
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: kube-network-policies
|
|
namespace: kube-system
|
|
labels:
|
|
tier: node
|
|
app: kube-network-policies
|
|
k8s-app: kube-network-policies
|
|
addonmanager.kubernetes.io/mode: Reconcile
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: kube-network-policies
|
|
template:
|
|
metadata:
|
|
labels:
|
|
tier: node
|
|
app: kube-network-policies
|
|
k8s-app: kube-network-policies
|
|
spec:
|
|
hostNetwork: true
|
|
tolerations:
|
|
- operator: Exists
|
|
effect: NoSchedule
|
|
serviceAccountName: kube-network-policies
|
|
containers:
|
|
- name: kube-network-policies
|
|
image: registry.k8s.io/networking/kube-network-policies:v0.2.0
|
|
command:
|
|
- /bin/sh
|
|
- -c
|
|
- /bin/netpol -v 4 1>>/var/log/kube-network-policies.log 2>&1
|
|
resources:
|
|
requests:
|
|
cpu: "100m"
|
|
memory: "50Mi"
|
|
securityContext:
|
|
privileged: true
|
|
volumeMounts:
|
|
- mountPath: /var/log
|
|
name: varlog
|
|
readOnly: false
|
|
- mountPath: /lib/modules
|
|
name: lib-modules
|
|
readOnly: true
|
|
volumes:
|
|
- name: varlog
|
|
hostPath:
|
|
path: /var/log
|
|
- name: lib-modules
|
|
hostPath:
|
|
path: /lib/modules
|