From 0f5ab096468085fc2a9ee8726cb3113220c38a37 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Lucas=20K=C3=A4ldstr=C3=B6m?= Date: Thu, 16 Mar 2017 21:44:07 +0200 Subject: [PATCH] Add a weave-kube manifest that works for kubeadm v1.6 --- prog/weave-kube/weave-daemonset-k8s-HEAD.yaml | 120 ++++++++++++++++++ 1 file changed, 120 insertions(+) create mode 100644 prog/weave-kube/weave-daemonset-k8s-HEAD.yaml diff --git a/prog/weave-kube/weave-daemonset-k8s-HEAD.yaml b/prog/weave-kube/weave-daemonset-k8s-HEAD.yaml new file mode 100644 index 0000000000..5e2aeafc96 --- /dev/null +++ b/prog/weave-kube/weave-daemonset-k8s-HEAD.yaml @@ -0,0 +1,120 @@ +kind: ClusterRole +apiVersion: rbac.authorization.k8s.io/v1beta1 +metadata: + name: weave-net +rules: +- apiGroups: + - "" + resources: + - pods + - namespaces + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - extensions + resources: + - networkpolicies + verbs: + - get + - list + - watch +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: weave-net + namespace: kube-system +--- +kind: ClusterRoleBinding +apiVersion: rbac.authorization.k8s.io/v1beta1 +metadata: + name: weave-net +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: weave-net +subjects: +- kind: ServiceAccount + name: weave-net + namespace: kube-system +--- +apiVersion: extensions/v1beta1 +kind: DaemonSet +metadata: + name: weave-net + namespace: kube-system +spec: + template: + metadata: + labels: + name: weave-net + spec: + hostNetwork: true + hostPID: true + containers: + - name: weave + image: weaveworks/weave-kube:latest + imagePullPolicy: Always + command: + - /home/weave/launch.sh + livenessProbe: + initialDelaySeconds: 30 + httpGet: + host: 127.0.0.1 + path: /status + port: 6784 + securityContext: + privileged: true + volumeMounts: + - name: weavedb + mountPath: /weavedb + - name: cni-bin + mountPath: /host/opt + - name: cni-bin2 + mountPath: /host/home + - name: cni-conf + mountPath: /host/etc + - name: dbus + mountPath: /host/var/lib/dbus + - name: lib-modules + mountPath: /lib/modules + resources: + requests: + cpu: 10m + - name: weave-npc + image: weaveworks/weave-npc:latest + imagePullPolicy: Always + resources: + requests: + cpu: 10m + securityContext: + privileged: true + restartPolicy: Always + tolerations: + - key: node-role.kubernetes.io/master + effect: NoSchedule + serviceAccountName: weave-net + securityContext: + seLinuxOptions: + type: spc_t + volumes: + - name: weavedb + emptyDir: {} + - name: cni-bin + hostPath: + path: /opt + - name: cni-bin2 + hostPath: + path: /home + - name: cni-conf + hostPath: + path: /etc + - name: dbus + hostPath: + path: /var/lib/dbus + - name: lib-modules + hostPath: + path: /lib/modules