Lubomir I. Ivanov
806518df13
In 1.24 kubeadm will: - stop using the "master" label on CP nodes. - start tainting CP nodes with both "master" and "control-plane" taints. In 1.25 the "master" taint will be removed. Adjust references of the "master" label/taint to the above.
74 lines
2.4 KiB
YAML
74 lines
2.4 KiB
YAML
# This is an example of how to setup cloud-controller-manager as a Daemonset in your cluster.
|
|
# It assumes that your masters can run pods and has the role node-role.kubernetes.io/master
|
|
# Note that this Daemonset will not work straight out of the box for your cloud, this is
|
|
# meant to be a guideline.
|
|
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: cloud-controller-manager
|
|
namespace: kube-system
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: system:cloud-controller-manager
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: cluster-admin
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: cloud-controller-manager
|
|
namespace: kube-system
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
labels:
|
|
k8s-app: cloud-controller-manager
|
|
name: cloud-controller-manager
|
|
namespace: kube-system
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
k8s-app: cloud-controller-manager
|
|
template:
|
|
metadata:
|
|
labels:
|
|
k8s-app: cloud-controller-manager
|
|
spec:
|
|
serviceAccountName: cloud-controller-manager
|
|
containers:
|
|
- name: cloud-controller-manager
|
|
# for in-tree providers we use k8s.gcr.io/cloud-controller-manager
|
|
# this can be replaced with any other image for out-of-tree providers
|
|
image: k8s.gcr.io/cloud-controller-manager:v1.8.0
|
|
command:
|
|
- /usr/local/bin/cloud-controller-manager
|
|
- --cloud-provider=[YOUR_CLOUD_PROVIDER] # Add your own cloud provider here!
|
|
- --leader-elect=true
|
|
- --use-service-account-credentials
|
|
# these flags will vary for every cloud provider
|
|
- --allocate-node-cidrs=true
|
|
- --configure-cloud-routes=true
|
|
- --cluster-cidr=172.17.0.0/16
|
|
tolerations:
|
|
# this is required so CCM can bootstrap itself
|
|
- key: node.cloudprovider.kubernetes.io/uninitialized
|
|
value: "true"
|
|
effect: NoSchedule
|
|
# these tolerations are to have the daemonset runnable on control plane nodes
|
|
# remove them if your control plane nodes should not run pods
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
- key: node-role.kubernetes.io/master
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
# this is to restrict CCM to only run on master nodes
|
|
# the node selector may vary depending on your cluster setup
|
|
nodeSelector:
|
|
node-role.kubernetes.io/master: ""
|