cleanup: replace node-role.kubernetes.io/master (#9627)
Signed-off-by: xin.li <xin.li@daocloud.io> Signed-off-by: xin.li <xin.li@daocloud.io>
This commit is contained in:
@ -1,4 +1,4 @@
|
|||||||
# Policy to ensure the API server isn't cut off. Can be modified, but ensure
|
# Policy to ensure the API server isn't cut off. Can be modified, but ensure
|
||||||
# that the main API server is always able to reach the Calico API server.
|
# that the main API server is always able to reach the Calico API server.
|
||||||
kind: NetworkPolicy
|
kind: NetworkPolicy
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
@ -94,6 +94,8 @@ spec:
|
|||||||
tolerations:
|
tolerations:
|
||||||
- effect: NoSchedule
|
- effect: NoSchedule
|
||||||
key: node-role.kubernetes.io/master
|
key: node-role.kubernetes.io/master
|
||||||
|
- effect: NoSchedule
|
||||||
|
key: node-role.kubernetes.io/control-plane
|
||||||
volumes:
|
volumes:
|
||||||
- name: calico-apiserver-certs
|
- name: calico-apiserver-certs
|
||||||
secret:
|
secret:
|
||||||
@ -104,8 +106,8 @@ spec:
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
name: calico-apiserver
|
name: calico-apiserver
|
||||||
namespace: calico-apiserver
|
namespace: calico-apiserver
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
|
@ -31,6 +31,8 @@ spec:
|
|||||||
operator: Exists
|
operator: Exists
|
||||||
- key: node-role.kubernetes.io/master
|
- key: node-role.kubernetes.io/master
|
||||||
effect: NoSchedule
|
effect: NoSchedule
|
||||||
|
- key: node-role.kubernetes.io/control-plane
|
||||||
|
effect: NoSchedule
|
||||||
serviceAccountName: calico-kube-controllers
|
serviceAccountName: calico-kube-controllers
|
||||||
priorityClassName: system-cluster-critical
|
priorityClassName: system-cluster-critical
|
||||||
# The controllers must run in the host network namespace so that
|
# The controllers must run in the host network namespace so that
|
||||||
|
Reference in New Issue
Block a user