titan-iac/services/maintenance/disable-k3s-traefik-daemonset.yaml

50 lines
1.4 KiB
YAML
Raw Normal View History

# services/maintenance/disable-k3s-traefik-daemonset.yaml
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: disable-k3s-traefik
namespace: maintenance
spec:
selector:
matchLabels:
app: disable-k3s-traefik
updateStrategy:
type: RollingUpdate
template:
metadata:
labels:
app: disable-k3s-traefik
spec:
serviceAccountName: disable-k3s-traefik
nodeSelector:
node-role.kubernetes.io/control-plane: "true"
tolerations:
- key: node-role.kubernetes.io/control-plane
operator: Exists
effect: NoSchedule
- key: node-role.kubernetes.io/master
operator: Exists
effect: NoSchedule
containers:
- name: disable-k3s-traefik
image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131
command: ["/usr/bin/env", "bash"]
args: ["/scripts/disable_k3s_traefik.sh"]
securityContext:
privileged: true
runAsUser: 0
volumeMounts:
- name: host-root
mountPath: /host
- name: script
mountPath: /scripts
readOnly: true
volumes:
- name: host-root
hostPath:
path: /
- name: script
configMap:
name: disable-k3s-traefik-script
defaultMode: 0555