k8s.io/kubernetes/gke-utility/kops-discovery/deployment.yaml at 30d1d8ee73d3d5d3da56bf5ff9c79a35fabdb8ef · ameukam/k8s.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
apiVersion: apps/v1
kind: Deployment
metadata:
  name: kops-discovery
  labels:
    app: kops-discovery
spec:
  replicas: 2
  selector:
    matchLabels:
      app: kops-discovery
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: kops-discovery
    spec:
      serviceAccountName: kops-discovery
      terminationGracePeriodSeconds: 30
      securityContext:
        runAsNonRoot: true
        seccompProfile:
          type: RuntimeDefault
      containers:
        - name: discovery-server
          image: registry.k8s.io/kops/discovery-server:1.35.0-beta.1
          args:
            - --listen=:8443
            - --storage=memory
          ports:
            - name: https
              containerPort: 8443
              protocol: TCP
          resources:
            requests:
              cpu: 100m
              memory: 128Mi
            limits:
              cpu: 500m
              memory: 256Mi
          securityContext:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: true
            capabilities:
              drop:
                - ALL
          # Note: kops discovery server has no health endpoints, using TCP probe
          livenessProbe:
            tcpSocket:
              port: 8443
            initialDelaySeconds: 10
            periodSeconds: 10
            timeoutSeconds: 5
            failureThreshold: 3
          readinessProbe:
            tcpSocket:
              port: 8443
            initialDelaySeconds: 5
            periodSeconds: 5
            timeoutSeconds: 3
            failureThreshold: 3