github.com/jlmeeker/kismatic@v1.10.1-0.20180612190640-57f9005a1f1a/ansible/roles/metrics-server/templates/metrics-server.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1
     2  kind: ClusterRoleBinding
     3  metadata:
     4    name: metrics-server:system:auth-delegator
     5  roleRef:
     6    apiGroup: rbac.authorization.k8s.io
     7    kind: ClusterRole
     8    name: system:auth-delegator
     9  subjects:
    10  - kind: ServiceAccount
    11    name: metrics-server
    12    namespace: kube-system
    13  ---
    14  apiVersion: rbac.authorization.k8s.io/v1
    15  kind: RoleBinding
    16  metadata:
    17    name: metrics-server-auth-reader
    18    namespace: kube-system
    19  roleRef:
    20    apiGroup: rbac.authorization.k8s.io
    21    kind: Role
    22    name: extension-apiserver-authentication-reader
    23  subjects:
    24  - kind: ServiceAccount
    25    name: metrics-server
    26    namespace: kube-system
    27  ---
    28  apiVersion: rbac.authorization.k8s.io/v1
    29  kind: ClusterRole
    30  metadata:
    31    name: system:metrics-server
    32  rules:
    33  - apiGroups:
    34    - ""
    35    resources:
    36    - pods
    37    - nodes
    38    - namespaces
    39    verbs:
    40    - get
    41    - list
    42    - watch
    43  - apiGroups:
    44    - ""
    45    resources: 
    46    - nodes/stats
    47    verbs:
    48    - create
    49    - get
    50    - list
    51    - watch
    52  - apiGroups:
    53    - "extensions"
    54    resources:
    55    - deployments
    56    verbs:
    57    - get
    58    - list
    59    - watch
    60  ---
    61  apiVersion: rbac.authorization.k8s.io/v1
    62  kind: ClusterRoleBinding
    63  metadata:
    64    name: system:metrics-server
    65  roleRef:
    66    apiGroup: rbac.authorization.k8s.io
    67    kind: ClusterRole
    68    name: system:metrics-server
    69  subjects:
    70  - kind: ServiceAccount
    71    name: metrics-server
    72    namespace: kube-system
    73  ---
    74  apiVersion: v1
    75  kind: Service
    76  metadata:
    77    name: metrics-server
    78    namespace: kube-system
    79    labels:
    80      kubernetes.io/name: "Metrics-server"
    81  spec:
    82    selector:
    83      k8s-app: metrics-server
    84    ports:
    85    - port: 443
    86      protocol: TCP
    87      targetPort: 443
    88  ---
    89  apiVersion: apiregistration.k8s.io/v1beta1
    90  kind: APIService
    91  metadata:
    92    name: v1beta1.metrics.k8s.io
    93  spec:
    94    service:
    95      name: metrics-server
    96      namespace: kube-system
    97    group: metrics.k8s.io
    98    version: v1beta1
    99    insecureSkipTLSVerify: true
   100    groupPriorityMinimum: 100
   101    versionPriority: 100
   102  ---
   103  apiVersion: v1
   104  kind: ServiceAccount
   105  metadata:
   106    name: metrics-server
   107    namespace: kube-system
   108  ---
   109  apiVersion: apps/v1
   110  kind: Deployment
   111  metadata:
   112    name: metrics-server
   113    namespace: kube-system
   114    labels:
   115      k8s-app: metrics-server
   116  spec:
   117    selector:
   118      matchLabels:
   119        k8s-app: metrics-server
   120    template:
   121      metadata:
   122        name: metrics-server
   123        labels:
   124          k8s-app: metrics-server
   125        annotations:
   126          scheduler.alpha.kubernetes.io/critical-pod: ''
   127      spec:
   128        tolerations:
   129        - key: "CriticalAddonsOnly"
   130          operator: "Exists"
   131        serviceAccountName: metrics-server
   132        containers:
   133        - name: metrics-server
   134          image: "{{ images.metrics_server }}"
   135          imagePullPolicy: Always
   136          command:
   137          - /metrics-server
   138          - --source=kubernetes.summary_api:https://kubernetes.default?kubeletHttps=true&kubeletPort=10250&useServiceAccount=true