cluster-version-operator/bootstrap/bootstrap-pod.yaml at main · openshift/cluster-version-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
apiVersion: v1
kind: Pod
metadata:
  name: bootstrap-cluster-version-operator
  namespace: openshift-cluster-version
  labels:
    k8s-app: cluster-version-operator
  annotations:
    include.release.openshift.io/{{ .ClusterProfile }}: "true"
spec:
  containers:
  - name: cluster-version-operator
    image: {{.ReleaseImage}}
    imagePullPolicy: Always
    args:
    - "start"
    - "--release-image={{.ReleaseImage}}"
    - "--enable-auto-update=false"
    - "--listen="
    - "--v=2"
    - "--kubeconfig=/etc/kubernetes/kubeconfig"
    securityContext:
      privileged: true
      readOnlyRootFilesystem: true
    terminationMessagePolicy: FallbackToLogsOnError
    volumeMounts:
    - mountPath: /etc/ssl/certs
      name: etc-ssl-certs
      readOnly: true
    - mountPath: /etc/kubernetes/kubeconfig
      name: kubeconfig
      readOnly: true
    env:
    - name: KUBERNETES_SERVICE_PORT  # allows CVO to communicate with apiserver directly on same host.
      value: "6443"
    - name: KUBERNETES_SERVICE_HOST  # allows CVO to communicate with apiserver directly on same host.
      value: "127.0.0.1"
    - name: NODE_NAME
      valueFrom:
        fieldRef:
          fieldPath: spec.nodeName
    - name: CLUSTER_PROFILE
      value: {{ .ClusterProfile }}
  dnsPolicy: ClusterFirstWithHostNet
  hostNetwork: true
  terminationGracePeriodSeconds: 130
  volumes:
  - name: kubeconfig
    hostPath:
      path: /etc/kubernetes/kubeconfig
  - name: etc-ssl-certs
    hostPath:
      path: /etc/ssl/certs