typhoon/addons/cluo/update-operator.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: container-linux-update-operator
  namespace: reboot-coordinator
spec:
  replicas: 1
  selector:
    matchLabels:
      app: container-linux-update-operator
  template:
    metadata:
      labels:
        app: container-linux-update-operator
      annotations:
        seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
    spec:
      containers:
      - name: update-operator
        image: quay.io/coreos/container-linux-update-operator:v0.7.0
        command:
        - "/bin/update-operator"
        env:
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
      tolerations:
      - key: node-role.kubernetes.io/master
        operator: Exists
        effect: NoSchedule
addons: Switch to apps/v1 workload APIs * Deployments now belong to the apps/v1 API group * DaemonSets now belong to the apps/v1 API group * RBAC types now belong to the rbac.authorization.k8s.io/v1 API group 2018-02-11 08:51:55 +01:00			`apiVersion: apps/v1`
Add heapster, dashboard, and CLUO addons 2017-08-28 02:20:29 +02:00			`kind: Deployment`
			`metadata:`
			`name: container-linux-update-operator`
Add Container Linux reboot-coordinator RBAC * Add a reboot-coordinator namespace for CLUO components * Define an RBAC ClusterRole for update-operator and update-agent * Replace the older-style where CLUO ran in kube-system, with admin privilege 2017-10-15 04:35:06 +02:00			`namespace: reboot-coordinator`
Add heapster, dashboard, and CLUO addons 2017-08-28 02:20:29 +02:00			`spec:`
			`replicas: 1`
addons: Switch to apps/v1 workload APIs * Deployments now belong to the apps/v1 API group * DaemonSets now belong to the apps/v1 API group * RBAC types now belong to the rbac.authorization.k8s.io/v1 API group 2018-02-11 08:51:55 +01:00			`selector:`
			`matchLabels:`
			`app: container-linux-update-operator`
Add heapster, dashboard, and CLUO addons 2017-08-28 02:20:29 +02:00			`template:`
			`metadata:`
			`labels:`
			`app: container-linux-update-operator`
Add docker/default seccomp to control plane and addons * Annotate pods, deployments, and daemonsets to start containers with the Docker runtime's default seccomp profile * Overrides Kubernetes default behavior which started containers with seccomp=unconfined * https://docs.docker.com/engine/security/seccomp/#pass-a-profile-for-a-container 2018-10-16 08:24:27 +02:00			`annotations:`
			`seccomp.security.alpha.kubernetes.io/pod: 'docker/default'`
Add heapster, dashboard, and CLUO addons 2017-08-28 02:20:29 +02:00			`spec:`
			`containers:`
			`- name: update-operator`
Update CLUO from v0.6.0 to v0.7.0 2018-06-14 00:05:22 +02:00			`image: quay.io/coreos/container-linux-update-operator:v0.7.0`
Add heapster, dashboard, and CLUO addons 2017-08-28 02:20:29 +02:00			`command:`
			`- "/bin/update-operator"`
			`env:`
			`- name: POD_NAMESPACE`
			`valueFrom:`
			`fieldRef:`
			`fieldPath: metadata.namespace`
Update CLUO addon to v0.4.0 and RBAC ClusterRole 2017-10-20 09:40:17 +02:00			`tolerations:`
			`- key: node-role.kubernetes.io/master`
			`operator: Exists`
			`effect: NoSchedule`