1apiVersion: v1
2kind: ServiceAccount
3metadata:
4 name: nodeagent
5 namespace: sds
6---
7apiVersion: rbac.authorization.k8s.io/v1
8kind: ClusterRoleBinding
9metadata:
10 name: nodeagent
11roleRef:
12 name: nodeagent
13 kind: ClusterRole
14 apiGroup: rbac.authorization.k8s.io
15subjects:
16- name: nodeagent
17 namespace: sds
18 kind: ServiceAccount
19---
20apiVersion: apps/v1
21kind: DaemonSet
22metadata:
23 name: node-agent
24 namespace: sds
25 labels:
26 platform.edge.ncr.com/component: nodeagent
27spec:
28 selector:
29 matchLabels:
30 platform.edge.ncr.com/component: nodeagent
31 template:
32 metadata:
33 labels:
34 platform.edge.ncr.com/component: nodeagent
35 spec:
36 serviceAccountName: nodeagent
37 automountServiceAccountToken: true
38 priorityClassName: edge-p1-critical-infra
39 containers:
40 - name: nodeagent
41 image: bzl://cmd/sds/nodeagent:container_push
42 ports:
43 - name: metrics
44 containerPort: 9080
45 env:
46 - name: HOSTNAME
47 valueFrom:
48 fieldRef:
49 fieldPath: spec.nodeName
50 - name: DEVICE_SYSTEM_LOG_LEVEL
51 valueFrom:
52 configMapKeyRef:
53 name: device-system-config
54 key: DEVICE_SYSTEM_LOG_LEVEL
55 optional: true
56 resources:
57 limits:
58 cpu: "100m"
59 memory: "100Mi"
60 requests:
61 cpu: "50m"
62 memory: "100Mi"
63 imagePullPolicy: IfNotPresent
64 imagePullSecrets:
65 - name: edge-docker-pull-secret
66---
67apiVersion: v1
68kind: ConfigMap
69metadata:
70 name: nodeagent-plugins
71 namespace: sds
72data:
73 breakglass: "true"
74 cniplugin: "true"
75 dhclient: "true" # todo - remove at n-2
76 edgeconfigsync: "true"
77 grub: "true"
78 iptables: "true"
79 netplan: "true"
80 nodefirewall: "true"
81 nodepatcher: "true"
82 ntp: "true"
83 remoteagentconfig: "true"
84 staticpodscheduler: "true"
85 suspendAll: "false" # Suspend all plugins (overwrites all other settings)
86 swapcfg: "true"
87 thinclientconfig: "false"
88 thinclientconfigmapwatcher: "false"
89 thinclientsecretwatcher: "false"
90 trafficshaping: "true"
View as plain text