...
1apiVersion: apps/v1
2kind: Deployment
3metadata:
4 name: descheduler
5 namespace: kube-system
6 labels:
7 app: descheduler
8spec:
9 replicas: 1
10 selector:
11 matchLabels:
12 app: descheduler
13 template:
14 metadata:
15 labels:
16 app: descheduler
17 spec:
18 priorityClassName: system-cluster-critical
19 serviceAccountName: descheduler-sa
20 containers:
21 - name: descheduler
22 image: registry.k8s.io/descheduler/descheduler:v0.29.0
23 imagePullPolicy: IfNotPresent
24 command:
25 - "/bin/descheduler"
26 args:
27 - "--policy-config-file"
28 - "/policy-dir/policy.yaml"
29 - "--descheduling-interval"
30 - "5m"
31 - "--v"
32 - "3"
33 ports:
34 - containerPort: 10258
35 protocol: TCP
36 livenessProbe:
37 failureThreshold: 3
38 httpGet:
39 path: /healthz
40 port: 10258
41 scheme: HTTPS
42 initialDelaySeconds: 3
43 periodSeconds: 10
44 resources:
45 requests:
46 cpu: 500m
47 memory: 256Mi
48 securityContext:
49 allowPrivilegeEscalation: false
50 capabilities:
51 drop:
52 - ALL
53 privileged: false
54 readOnlyRootFilesystem: true
55 runAsNonRoot: true
56 volumeMounts:
57 - mountPath: /policy-dir
58 name: policy-volume
59 volumes:
60 - name: policy-volume
61 configMap:
62 name: descheduler-policy-configmap
View as plain text