revisionHistoryLimit: 10
selector:
matchLabels:
k8s-app: kube-proxy
tier: node
template:
metadata:
labels:
k8s-app: kube-proxy
tier: node
spec:
containers:
- command:
- /usr/local/bin/kube-proxy
- --cluster-cidr=10.244.0.0/16
- --conntrack-max-per-core=0
- --hostname-override=$(NODE_NAME)
- --kubeconfig=/etc/kubernetes/kubeconfig
- --proxy-mode=nftables
env:
- name: NODE_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: spec.nodeName
- name: POD_IP
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: status.podIP
image: registry.k8s.io/kube-proxy:v1.36.4
imagePullPolicy: IfNotPresent
name: kube-proxy
resources: {}
securityContext:
privileged: true
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /lib/modules
name: lib-modules
readOnly: true
- mountPath: /etc/ssl/certs
name: ssl-certs-host
readOnly: true
- mountPath: /etc/kubernetes
name: kubeconfig
readOnly: true
dnsPolicy: ClusterFirst
hostNetwork: true
priorityClassName: system-cluster-critical
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
serviceAccount: kube-proxy
serviceAccountName: kube-proxy
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoSchedule
operator: Exists
- effect: NoExecute
operator: Exists
volumes:
- hostPath:
path: /usr/lib/modules
type: ''
name: lib-modules
- hostPath:
path: /etc/ssl/certs
type: ''
name: ssl-certs-host
- configMap:
defaultMode: 420
name: kubeconfig-in-cluster
name: kubeconfig
updateStrategy:
rollingUpdate:
maxSurge: 0
maxUnavailable: 1
type: RollingUpdate