1apiVersion: v1
2kind: Namespace
3metadata:
4 name: kured
5 labels:
6 platform.edge.ncr.com/component: kured
7 annotations:
8 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
9 pallet.edge.ncr.com/name: kured
10 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
11 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
12 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
13 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
14---
15apiVersion: v1
16kind: ServiceAccount
17metadata:
18 name: kured
19 namespace: kured
20 labels:
21 configmanagement.gke.io/cluster-selector: dsds-cluster
22 platform.edge.ncr.com/component: kured
23 annotations:
24 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
25 pallet.edge.ncr.com/name: kured
26 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
27 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
28 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
29 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
30---
31apiVersion: rbac.authorization.k8s.io/v1
32kind: Role
33metadata:
34 name: kured
35 namespace: kured
36 labels:
37 configmanagement.gke.io/cluster-selector: dsds-cluster
38 platform.edge.ncr.com/component: kured
39 annotations:
40 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
41 pallet.edge.ncr.com/name: kured
42 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
43 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
44 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
45 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
46rules:
47- resources: ["daemonsets"]
48 apiGroups: ["apps"]
49 resourceNames: ["kured"]
50 verbs: ["update"]
51---
52apiVersion: rbac.authorization.k8s.io/v1
53kind: ClusterRole
54metadata:
55 name: kured
56 labels:
57 configmanagement.gke.io/cluster-selector: dsds-cluster
58 platform.edge.ncr.com/component: kured
59 annotations:
60 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
61 pallet.edge.ncr.com/name: kured
62 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
63 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
64 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
65 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
66rules:
67- resources: ["nodes"]
68 apiGroups: [""]
69 verbs: ["get", "patch"]
70- resources: ["pods"]
71 apiGroups: [""]
72 verbs: ["list", "delete", "get"]
73- resources: ["daemonsets"]
74 apiGroups: ["apps"]
75 verbs: ["get"]
76- resources: ["pods/eviction"]
77 apiGroups: [""]
78 verbs: ["create"]
79---
80apiVersion: rbac.authorization.k8s.io/v1
81kind: RoleBinding
82metadata:
83 name: kured
84 namespace: kured
85 labels:
86 configmanagement.gke.io/cluster-selector: dsds-cluster
87 platform.edge.ncr.com/component: kured
88 annotations:
89 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
90 pallet.edge.ncr.com/name: kured
91 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
92 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
93 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
94 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
95roleRef:
96 name: kured
97 kind: Role
98 apiGroup: rbac.authorization.k8s.io
99subjects:
100- name: kured
101 namespace: kured
102 kind: ServiceAccount
103---
104apiVersion: rbac.authorization.k8s.io/v1
105kind: ClusterRoleBinding
106metadata:
107 name: kured
108 labels:
109 configmanagement.gke.io/cluster-selector: dsds-cluster
110 platform.edge.ncr.com/component: kured
111 annotations:
112 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
113 pallet.edge.ncr.com/name: kured
114 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
115 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
116 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
117 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
118roleRef:
119 name: kured
120 kind: ClusterRole
121 apiGroup: rbac.authorization.k8s.io
122subjects:
123- name: kured
124 namespace: kured
125 kind: ServiceAccount
126---
127apiVersion: v1
128kind: ConfigMap
129metadata:
130 name: reboot-config-2c797bc9h8
131 namespace: kured
132 labels:
133 platform.edge.ncr.com/component: kured
134 annotations:
135 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
136 pallet.edge.ncr.com/name: kured
137 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
138 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
139 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
140 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
141data:
142 reboot.sh: "#!/bin/bash\nset -e\n\nif grep -qs poweroff /var/run/reboot-required;\nthen \n action=poweroff;\nelse\n action=reboot;\nfi\n\necho \"Action: $action\";\n\necho \"Stopping kubelet\"\n/bin/systemctl stop kubelet\n\necho \"Stopping containers\"\nkured_id=$(crictl ps --name kured -q)\necho -e \"$(crictl ps -q | grep -v $kured_id)\\n$kured_id\" | xargs -L1 -P 8 crictl stop -t 2 ||:\n\necho \"Stopping containerd\"\n/bin/systemctl stop containerd\n\nif [ -f /usr/lib/systemd/scripts/zynstra-pre-reboot-upgrade.sh ];\nthen\n /usr/lib/systemd/scripts/zynstra-pre-reboot-upgrade.sh ||:\nfi\n\necho \"$action node\"\n/bin/systemctl $action"
143---
144apiVersion: apps/v1
145kind: DaemonSet
146metadata:
147 name: kured
148 namespace: kured
149 labels:
150 configmanagement.gke.io/cluster-selector: dsds-cluster
151 platform.edge.ncr.com/component: kured
152 annotations:
153 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
154 pallet.edge.ncr.com/name: kured
155 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
156 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
157 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
158 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
159spec:
160 selector:
161 matchLabels:
162 name: kured
163 configmanagement.gke.io/cluster-selector: dsds-cluster
164 platform.edge.ncr.com/component: kured
165 template:
166 metadata:
167 labels:
168 name: kured
169 configmanagement.gke.io/cluster-selector: dsds-cluster
170 platform.edge.ncr.com/component: kured
171 annotations:
172 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
173 pallet.edge.ncr.com/name: kured
174 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
175 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
176 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
177 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
178 spec:
179 restartPolicy: Always
180 serviceAccountName: kured
181 hostPID: true
182 containers:
183 - name: kured
184 image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/thirdparty/ghcr.io/kubereboot/kured@sha256:112fca6f2f3f11ac567b71f4f4a4c2c64f68e8d88ced3afed821e8c4c28ff40c
185 command:
186 - /usr/bin/kured
187 - --ds-namespace=kured
188 - --force-reboot=true
189 - --period=1m
190 - --drain-timeout=10m
191 - --drain-grace-period=-1
192 - --reboot-command=sh -c "systemd-run --unit=reboot.sh /usr/local/kured/reboot.sh;journalctl -u reboot.sh -f"
193 ports:
194 - name: metrics
195 containerPort: 8080
196 env:
197 - name: KURED_NODE_ID
198 valueFrom:
199 fieldRef:
200 fieldPath: spec.nodeName
201 imagePullPolicy: IfNotPresent
202 securityContext:
203 privileged: true
204 tolerations:
205 - effect: NoSchedule
206 key: node-role.kubernetes.io/control-plane
207 - effect: NoSchedule
208 key: node-role.kubernetes.io/master
209 initContainers:
210 - name: reboot-script
211 image: busybox
212 command: ["cp", "-af", "/script/reboot.sh", "/usr/local/kured"]
213 volumeMounts:
214 - name: script-volume
215 mountPath: /usr/local/kured
216 - name: config-volume
217 mountPath: /script/reboot.sh
218 subPath: reboot.sh
219 imagePullPolicy: IfNotPresent
220 volumes:
221 - name: config-volume
222 configMap:
223 name: reboot-config-2c797bc9h8
224 defaultMode: 493 #755
225 - name: script-volume
226 hostPath:
227 type: DirectoryOrCreate
228 path: /usr/local/kured
229 updateStrategy:
230 type: RollingUpdate
View as plain text