@@ -2977,370 +2977,6 @@ subjects:
2977
2977
- kind: ServiceAccount
2978
2978
name: ovn
2979
2979
namespace: kube-system
2980
-
2981
- ---
2982
- kind: Service
2983
- apiVersion: v1
2984
- metadata:
2985
- name: ovn-nb
2986
- namespace: kube-system
2987
- spec:
2988
- ports:
2989
- - name: ovn-nb
2990
- protocol: TCP
2991
- port: 6641
2992
- targetPort: 6641
2993
- type: ClusterIP
2994
- ${SVC_YAML_IPFAMILYPOLICY}
2995
- selector:
2996
- app: ovn-central
2997
- ovn-nb-leader: "true"
2998
- sessionAffinity: None
2999
-
3000
- ---
3001
- kind: Service
3002
- apiVersion: v1
3003
- metadata:
3004
- name: ovn-sb
3005
- namespace: kube-system
3006
- spec:
3007
- ports:
3008
- - name: ovn-sb
3009
- protocol: TCP
3010
- port: 6642
3011
- targetPort: 6642
3012
- type: ClusterIP
3013
- ${SVC_YAML_IPFAMILYPOLICY}
3014
- selector:
3015
- app: ovn-central
3016
- ovn-sb-leader: "true"
3017
- sessionAffinity: None
3018
-
3019
- ---
3020
- kind: Service
3021
- apiVersion: v1
3022
- metadata:
3023
- name: ovn-northd
3024
- namespace: kube-system
3025
- spec:
3026
- ports:
3027
- - name: ovn-northd
3028
- protocol: TCP
3029
- port: 6643
3030
- targetPort: 6643
3031
- type: ClusterIP
3032
- ${SVC_YAML_IPFAMILYPOLICY}
3033
- selector:
3034
- app: ovn-central
3035
- ovn-northd-leader: "true"
3036
- sessionAffinity: None
3037
- ---
3038
- kind: Deployment
3039
- apiVersion: apps/v1
3040
- metadata:
3041
- name: ovn-central
3042
- namespace: kube-system
3043
- annotations:
3044
- kubernetes.io/description: |
3045
- OVN components: northd, nb and sb.
3046
- spec:
3047
- replicas: $count
3048
- strategy:
3049
- rollingUpdate:
3050
- maxSurge: 0
3051
- maxUnavailable: 1
3052
- type: RollingUpdate
3053
- selector:
3054
- matchLabels:
3055
- app: ovn-central
3056
- template:
3057
- metadata:
3058
- labels:
3059
- app: ovn-central
3060
- component: network
3061
- type: infra
3062
- spec:
3063
- tolerations:
3064
- - effect: NoSchedule
3065
- operator: Exists
3066
- - effect: NoExecute
3067
- operator: Exists
3068
- - key: CriticalAddonsOnly
3069
- operator: Exists
3070
- affinity:
3071
- podAntiAffinity:
3072
- requiredDuringSchedulingIgnoredDuringExecution:
3073
- - labelSelector:
3074
- matchLabels:
3075
- app: ovn-central
3076
- topologyKey: kubernetes.io/hostname
3077
- priorityClassName: system-cluster-critical
3078
- serviceAccountName: ovn
3079
- hostNetwork: true
3080
- containers:
3081
- - name: ovn-central
3082
- image: "$REGISTRY /kube-ovn:$VERSION "
3083
- imagePullPolicy: $IMAGE_PULL_POLICY
3084
- command: ["/kube-ovn/start-db.sh"]
3085
- securityContext:
3086
- capabilities:
3087
- add: ["SYS_NICE"]
3088
- env:
3089
- - name: ENABLE_SSL
3090
- value: "$ENABLE_SSL "
3091
- - name: NODE_IPS
3092
- value: $addresses
3093
- - name: POD_IP
3094
- valueFrom:
3095
- fieldRef:
3096
- fieldPath: status.podIP
3097
- - name: POD_NAME
3098
- valueFrom:
3099
- fieldRef:
3100
- fieldPath: metadata.name
3101
- - name: POD_NAMESPACE
3102
- valueFrom:
3103
- fieldRef:
3104
- fieldPath: metadata.namespace
3105
- - name: POD_IPS
3106
- valueFrom:
3107
- fieldRef:
3108
- fieldPath: status.podIPs
3109
- - name: ENABLE_BIND_LOCAL_IP
3110
- value: "$ENABLE_BIND_LOCAL_IP "
3111
- - name: DEBUG_WRAPPER
3112
- value: "$DEBUG_WRAPPER "
3113
- resources:
3114
- requests:
3115
- cpu: 300m
3116
- memory: 300Mi
3117
- limits:
3118
- cpu: 3
3119
- memory: 4Gi
3120
- volumeMounts:
3121
- - mountPath: /var/run/openvswitch
3122
- name: host-run-ovs
3123
- - mountPath: /var/run/ovn
3124
- name: host-run-ovn
3125
- - mountPath: /sys
3126
- name: host-sys
3127
- readOnly: true
3128
- - mountPath: /etc/openvswitch
3129
- name: host-config-openvswitch
3130
- - mountPath: /etc/ovn
3131
- name: host-config-ovn
3132
- - mountPath: /var/log/openvswitch
3133
- name: host-log-ovs
3134
- - mountPath: /var/log/ovn
3135
- name: host-log-ovn
3136
- - mountPath: /etc/localtime
3137
- name: localtime
3138
- readOnly: true
3139
- - mountPath: /var/run/tls
3140
- name: kube-ovn-tls
3141
- readinessProbe:
3142
- exec:
3143
- command:
3144
- - bash
3145
- - /kube-ovn/ovn-healthcheck.sh
3146
- periodSeconds: 15
3147
- timeoutSeconds: 45
3148
- livenessProbe:
3149
- exec:
3150
- command:
3151
- - bash
3152
- - /kube-ovn/ovn-healthcheck.sh
3153
- initialDelaySeconds: 30
3154
- periodSeconds: 15
3155
- failureThreshold: 5
3156
- timeoutSeconds: 45
3157
- nodeSelector:
3158
- kubernetes.io/os: "linux"
3159
- kube-ovn/role: "master"
3160
- volumes:
3161
- - name: host-run-ovs
3162
- hostPath:
3163
- path: /run/openvswitch
3164
- - name: host-run-ovn
3165
- hostPath:
3166
- path: /run/ovn
3167
- - name: host-sys
3168
- hostPath:
3169
- path: /sys
3170
- - name: host-config-openvswitch
3171
- hostPath:
3172
- path: /etc/origin/openvswitch
3173
- - name: host-config-ovn
3174
- hostPath:
3175
- path: /etc/origin/ovn
3176
- - name: host-log-ovs
3177
- hostPath:
3178
- path: /var/log/openvswitch
3179
- - name: host-log-ovn
3180
- hostPath:
3181
- path: /var/log/ovn
3182
- - name: localtime
3183
- hostPath:
3184
- path: /etc/localtime
3185
- - name: kube-ovn-tls
3186
- secret:
3187
- optional: true
3188
- secretName: kube-ovn-tls
3189
-
3190
- ---
3191
- kind: DaemonSet
3192
- apiVersion: apps/v1
3193
- metadata:
3194
- name: ovs-ovn
3195
- namespace: kube-system
3196
- annotations:
3197
- kubernetes.io/description: |
3198
- This daemon set launches the openvswitch daemon.
3199
- spec:
3200
- selector:
3201
- matchLabels:
3202
- app: ovs
3203
- updateStrategy:
3204
- type: OnDelete
3205
- template:
3206
- metadata:
3207
- labels:
3208
- app: ovs
3209
- component: network
3210
- type: infra
3211
- spec:
3212
- tolerations:
3213
- - effect: NoSchedule
3214
- operator: Exists
3215
- - effect: NoExecute
3216
- operator: Exists
3217
- - key: CriticalAddonsOnly
3218
- operator: Exists
3219
- priorityClassName: system-node-critical
3220
- serviceAccountName: ovn
3221
- hostNetwork: true
3222
- hostPID: true
3223
- containers:
3224
- - name: openvswitch
3225
- image: "$REGISTRY /kube-ovn-dpdk:$DPDK_VERSION -$VERSION "
3226
- imagePullPolicy: $IMAGE_PULL_POLICY
3227
- command: ["/kube-ovn/start-ovs-dpdk.sh"]
3228
- securityContext:
3229
- runAsUser: 0
3230
- privileged: true
3231
- env:
3232
- - name: ENABLE_SSL
3233
- value: "$ENABLE_SSL "
3234
- - name: POD_IP
3235
- valueFrom:
3236
- fieldRef:
3237
- fieldPath: status.podIP
3238
- - name: KUBE_NODE_NAME
3239
- valueFrom:
3240
- fieldRef:
3241
- fieldPath: spec.nodeName
3242
- - name: OVN_DB_IPS
3243
- value: $addresses
3244
- volumeMounts:
3245
- - mountPath: /var/run/netns
3246
- name: host-ns
3247
- mountPropagation: HostToContainer
3248
- - mountPath: /lib/modules
3249
- name: host-modules
3250
- readOnly: true
3251
- - mountPath: /var/run/openvswitch
3252
- name: host-run-ovs
3253
- - mountPath: /var/run/ovn
3254
- name: host-run-ovn
3255
- - mountPath: /sys
3256
- name: host-sys
3257
- readOnly: true
3258
- - mountPath: /etc/openvswitch
3259
- name: host-config-openvswitch
3260
- - mountPath: /etc/ovn
3261
- name: host-config-ovn
3262
- - mountPath: /var/log/openvswitch
3263
- name: host-log-ovs
3264
- - mountPath: /var/log/ovn
3265
- name: host-log-ovn
3266
- - mountPath: /opt/ovs-config
3267
- name: host-config-ovs
3268
- - mountPath: /dev/hugepages
3269
- name: hugepage
3270
- - mountPath: /etc/localtime
3271
- name: localtime
3272
- readOnly: true
3273
- - mountPath: /var/run/tls
3274
- name: kube-ovn-tls
3275
- readinessProbe:
3276
- exec:
3277
- command:
3278
- - bash
3279
- - /kube-ovn/ovs-dpdk-healthcheck.sh
3280
- periodSeconds: 5
3281
- timeoutSeconds: 45
3282
- livenessProbe:
3283
- exec:
3284
- command:
3285
- - bash
3286
- - /kube-ovn/ovs-dpdk-healthcheck.sh
3287
- initialDelaySeconds: 60
3288
- periodSeconds: 5
3289
- failureThreshold: 5
3290
- timeoutSeconds: 45
3291
- resources:
3292
- requests:
3293
- cpu: $DPDK_CPU
3294
- memory: $DPDK_MEMORY
3295
- limits:
3296
- cpu: $DPDK_CPU
3297
- memory: $DPDK_MEMORY
3298
- hugepages-1Gi: 1Gi
3299
- nodeSelector:
3300
- kubernetes.io/os: "linux"
3301
- ovn.kubernetes.io/ovs_dp_type: "kernel"
3302
- volumes:
3303
- - name: host-modules
3304
- hostPath:
3305
- path: /lib/modules
3306
- - name: host-run-ovs
3307
- hostPath:
3308
- path: /run/openvswitch
3309
- - name: host-run-ovn
3310
- hostPath:
3311
- path: /run/ovn
3312
- - name: host-sys
3313
- hostPath:
3314
- path: /sys
3315
- - name: host-ns
3316
- hostPath:
3317
- path: /var/run/netns
3318
- - name: host-config-openvswitch
3319
- hostPath:
3320
- path: /etc/origin/openvswitch
3321
- - name: host-config-ovn
3322
- hostPath:
3323
- path: /etc/origin/ovn
3324
- - name: host-log-ovs
3325
- hostPath:
3326
- path: /var/log/openvswitch
3327
- - name: host-log-ovn
3328
- hostPath:
3329
- path: /var/log/ovn
3330
- - name: host-config-ovs
3331
- hostPath:
3332
- path: /opt/ovs-config
3333
- type: DirectoryOrCreate
3334
- - name: hugepage
3335
- emptyDir:
3336
- medium: HugePages
3337
- - name: localtime
3338
- hostPath:
3339
- path: /etc/localtime
3340
- - name: kube-ovn-tls
3341
- secret:
3342
- optional: true
3343
- secretName: kube-ovn-tls
3344
2980
EOF
3345
2981
3346
2982
cat << EOF > kube-ovn-cni-sa.yaml
0 commit comments