sigs.k8s.io/cluster-api@v1.7.1/config/manager/manager.yaml (about)

     1  ---
     2  apiVersion: apps/v1
     3  kind: Deployment
     4  metadata:
     5    name: controller-manager
     6    namespace: system
     7    labels:
     8      control-plane: controller-manager
     9  spec:
    10    selector:
    11      matchLabels:
    12        control-plane: controller-manager
    13    replicas: 1
    14    template:
    15      metadata:
    16        labels:
    17          control-plane: controller-manager
    18      spec:
    19        containers:
    20          - command:
    21              - /manager
    22            args:
    23              - "--leader-elect"
    24              - "--diagnostics-address=${CAPI_DIAGNOSTICS_ADDRESS:=:8443}"
    25              - "--insecure-diagnostics=${CAPI_INSECURE_DIAGNOSTICS:=false}"
    26              - "--feature-gates=MachinePool=${EXP_MACHINE_POOL:=true},ClusterResourceSet=${EXP_CLUSTER_RESOURCE_SET:=true},ClusterTopology=${CLUSTER_TOPOLOGY:=false},RuntimeSDK=${EXP_RUNTIME_SDK:=false},MachineSetPreflightChecks=${EXP_MACHINE_SET_PREFLIGHT_CHECKS:=false}"
    27            image: controller:latest
    28            name: manager
    29            env:
    30              - name: POD_NAMESPACE
    31                valueFrom:
    32                  fieldRef:
    33                    fieldPath: metadata.namespace
    34              - name: POD_NAME
    35                valueFrom:
    36                  fieldRef:
    37                    fieldPath: metadata.name
    38              - name: POD_UID
    39                valueFrom:
    40                  fieldRef:
    41                    fieldPath: metadata.uid
    42            ports:
    43              - containerPort: 9440
    44                name: healthz
    45                protocol: TCP
    46              - containerPort: 8443
    47                name: metrics
    48                protocol: TCP
    49            readinessProbe:
    50              httpGet:
    51                path: /readyz
    52                port: healthz
    53            livenessProbe:
    54              httpGet:
    55                path: /healthz
    56                port: healthz
    57            securityContext:
    58              allowPrivilegeEscalation: false
    59              capabilities:
    60                drop:
    61                  - ALL
    62              privileged: false
    63              runAsUser: 65532
    64              runAsGroup: 65532
    65        terminationGracePeriodSeconds: 10
    66        serviceAccountName: manager
    67        tolerations:
    68          - effect: NoSchedule
    69            key: node-role.kubernetes.io/master
    70          - effect: NoSchedule
    71            key: node-role.kubernetes.io/control-plane
    72        securityContext:
    73          runAsNonRoot: true
    74          seccompProfile:
    75            type: RuntimeDefault