Skip to content

Commit 82731b8

Browse files
k8s-on-aws-manager-app[bot]k8s-on-aws-manager-app[bot]
authored
external-provisioner: Update to version v5.1.0-eks-1-31-10-master-27
Update container-registry.zalando.net/teapot/external-provisioner to version v5.1.0-eks-1-31-10-master-27
1 parent beb95a1 commit 82731b8

File tree

1 file changed

+181
-0
lines changed

1 file changed

+181
-0
lines changed

‎cluster/manifests/04-ebs-csi/controller.yaml

Lines changed: 181 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,181 @@
1+
kind: Deployment
2+
apiVersion: apps/v1
3+
metadata:
4+
name: ebs-csi-controller
5+
namespace: kube-system
6+
labels:
7+
application: kubernetes
8+
component: ebs-csi-driver
9+
spec:
10+
replicas: 1
11+
selector:
12+
matchLabels:
13+
deployment: ebs-csi-controller
14+
template:
15+
metadata:
16+
labels:
17+
application: kubernetes
18+
component: ebs-csi-driver
19+
deployment: ebs-csi-controller
20+
annotations:
21+
logging/destination: "{{.Cluster.ConfigItems.log_destination_infra}}"
22+
spec:
23+
serviceAccountName: ebs-csi-controller-sa
24+
priorityClassName: system-cluster-critical
25+
{{- if eq .Cluster.Provider "zalando-eks"}}
26+
nodeSelector:
27+
dedicated: cluster-seed
28+
tolerations:
29+
- key: dedicated
30+
value: cluster-seed
31+
effect: NoSchedule
32+
{{- else}}
33+
nodeSelector:
34+
node.kubernetes.io/role: master
35+
tolerations:
36+
- key: node.kubernetes.io/role
37+
value: master
38+
effect: NoSchedule
39+
{{- end}}
40+
securityContext:
41+
fsGroup: 1000
42+
runAsGroup: 1000
43+
runAsNonRoot: true
44+
runAsUser: 1000
45+
containers:
46+
- name: ebs-plugin
47+
image: container-registry.zalando.net/teapot/aws-ebs-csi-driver:v1.38.1-master-26
48+
args:
49+
- controller
50+
- --endpoint=$(CSI_ENDPOINT)
51+
- --k8s-tag-cluster-id={{ .Cluster.ID }}
52+
- --v=2
53+
env:
54+
- name: CSI_ENDPOINT
55+
value: unix:///var/lib/csi/sockets/pluginproxy/csi.sock
56+
- name: CSI_NODE_NAME
57+
valueFrom:
58+
fieldRef:
59+
fieldPath: spec.nodeName
60+
resources:
61+
requests:
62+
cpu: 10m
63+
memory: 40Mi
64+
limits:
65+
cpu: 10m
66+
memory: 40Mi
67+
volumeMounts:
68+
- name: socket-dir
69+
mountPath: /var/lib/csi/sockets/pluginproxy/
70+
ports:
71+
- name: healthz
72+
containerPort: 9808
73+
protocol: TCP
74+
livenessProbe:
75+
httpGet:
76+
path: /healthz
77+
port: healthz
78+
initialDelaySeconds: 10
79+
timeoutSeconds: 3
80+
periodSeconds: 10
81+
failureThreshold: 5
82+
readinessProbe:
83+
httpGet:
84+
path: /healthz
85+
port: healthz
86+
initialDelaySeconds: 10
87+
timeoutSeconds: 3
88+
periodSeconds: 10
89+
failureThreshold: 5
90+
securityContext:
91+
allowPrivilegeEscalation: false
92+
readOnlyRootFilesystem: true
93+
- name: csi-provisioner
94+
image: container-registry.zalando.net/teapot/external-provisioner:v5.1.0-eks-1-31-10-master-27
95+
args:
96+
- --csi-address=$(ADDRESS)
97+
- --v=2
98+
- --feature-gates=Topology=true
99+
- --extra-create-metadata
100+
- --leader-election=true
101+
- --default-fstype=ext4
102+
env:
103+
- name: ADDRESS
104+
value: /var/lib/csi/sockets/pluginproxy/csi.sock
105+
resources:
106+
requests:
107+
cpu: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_cpu }}
108+
memory: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_memory }}
109+
limits:
110+
cpu: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_cpu }}
111+
memory: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_memory }}
112+
volumeMounts:
113+
- name: socket-dir
114+
mountPath: /var/lib/csi/sockets/pluginproxy/
115+
securityContext:
116+
allowPrivilegeEscalation: false
117+
readOnlyRootFilesystem: true
118+
- name: csi-attacher
119+
image: container-registry.zalando.net/teapot/external-attacher:v4.7.0-eks-1-31-10-master-26
120+
args:
121+
- --csi-address=$(ADDRESS)
122+
- --v=2
123+
- --leader-election=true
124+
env:
125+
- name: ADDRESS
126+
value: /var/lib/csi/sockets/pluginproxy/csi.sock
127+
resources:
128+
requests:
129+
cpu: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_cpu }}
130+
memory: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_memory }}
131+
limits:
132+
cpu: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_cpu }}
133+
memory: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_memory }}
134+
volumeMounts:
135+
- name: socket-dir
136+
mountPath: /var/lib/csi/sockets/pluginproxy/
137+
securityContext:
138+
allowPrivilegeEscalation: false
139+
readOnlyRootFilesystem: true
140+
- name: csi-resizer
141+
image: container-registry.zalando.net/teapot/external-resizer:v1.12.0-eks-1-31-10-master-26
142+
args:
143+
- --csi-address=$(ADDRESS)
144+
- --v=2
145+
- --handle-volume-inuse-error=false
146+
env:
147+
- name: ADDRESS
148+
value: /var/lib/csi/sockets/pluginproxy/csi.sock
149+
resources:
150+
requests:
151+
cpu: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_cpu }}
152+
memory: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_memory }}
153+
limits:
154+
cpu: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_cpu }}
155+
memory: {{ .Cluster.ConfigItems.ebs_csi_controller_sidecar_memory }}
156+
volumeMounts:
157+
- name: socket-dir
158+
mountPath: /var/lib/csi/sockets/pluginproxy/
159+
securityContext:
160+
allowPrivilegeEscalation: false
161+
readOnlyRootFilesystem: true
162+
- name: liveness-probe
163+
image: container-registry.zalando.net/teapot/livenessprobe:v2.14.0-eks-1-31-10-master-26
164+
args:
165+
- --csi-address=/csi/csi.sock
166+
resources:
167+
requests:
168+
cpu: 10m
169+
memory: 40Mi
170+
limits:
171+
cpu: 10m
172+
memory: 40Mi
173+
volumeMounts:
174+
- name: socket-dir
175+
mountPath: /csi
176+
securityContext:
177+
allowPrivilegeEscalation: false
178+
readOnlyRootFilesystem: true
179+
volumes:
180+
- name: socket-dir
181+
emptyDir: {}

0 commit comments

Comments
 (0)