mirror of
https://github.com/puppetmaster/typhoon.git
synced 2024-12-26 15:29:34 +01:00
2eaf04c68b
* Both flannel and Calico support host port via `portmap` * Allows writing NetworkPolicies that reference ingress pods in `from` or `to`. HostNetwork pods were difficult to write network policy for since they could circumvent the CNI network to communicate with pods on the same node.
73 lines
2.0 KiB
YAML
73 lines
2.0 KiB
YAML
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: nginx-ingress-controller
|
|
namespace: ingress
|
|
spec:
|
|
updateStrategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxUnavailable: 1
|
|
selector:
|
|
matchLabels:
|
|
name: nginx-ingress-controller
|
|
phase: prod
|
|
template:
|
|
metadata:
|
|
labels:
|
|
name: nginx-ingress-controller
|
|
phase: prod
|
|
spec:
|
|
nodeSelector:
|
|
node-role.kubernetes.io/node: ""
|
|
containers:
|
|
- name: nginx-ingress-controller
|
|
image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.15.0
|
|
args:
|
|
- /nginx-ingress-controller
|
|
- --default-backend-service=$(POD_NAMESPACE)/default-backend
|
|
- --ingress-class=public
|
|
# use downward API
|
|
env:
|
|
- name: POD_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.name
|
|
- name: POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
ports:
|
|
- name: http
|
|
containerPort: 80
|
|
hostPort: 80
|
|
- name: https
|
|
containerPort: 443
|
|
hostPort: 443
|
|
- name: health
|
|
containerPort: 10254
|
|
hostPort: 10254
|
|
livenessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /healthz
|
|
port: 10254
|
|
scheme: HTTP
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /healthz
|
|
port: 10254
|
|
scheme: HTTP
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
securityContext:
|
|
runAsNonRoot: false
|
|
restartPolicy: Always
|
|
terminationGracePeriodSeconds: 60
|