Merge pull request #4303 from damienleger/priorityclass-securitycontext
[CA] [AWS examples] Add priorityClassName & securityContext & upgrade image
This commit is contained in:
commit
6586d0c1ad
|
|
@ -137,9 +137,13 @@ spec:
|
||||||
prometheus.io/scrape: 'true'
|
prometheus.io/scrape: 'true'
|
||||||
prometheus.io/port: '8085'
|
prometheus.io/port: '8085'
|
||||||
spec:
|
spec:
|
||||||
|
priorityClassName: system-cluster-critical
|
||||||
|
securityContext:
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 65534
|
||||||
serviceAccountName: cluster-autoscaler
|
serviceAccountName: cluster-autoscaler
|
||||||
containers:
|
containers:
|
||||||
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.17.3
|
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.21.0
|
||||||
name: cluster-autoscaler
|
name: cluster-autoscaler
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
|
|
|
||||||
|
|
@ -137,9 +137,13 @@ spec:
|
||||||
prometheus.io/scrape: 'true'
|
prometheus.io/scrape: 'true'
|
||||||
prometheus.io/port: '8085'
|
prometheus.io/port: '8085'
|
||||||
spec:
|
spec:
|
||||||
|
priorityClassName: system-cluster-critical
|
||||||
|
securityContext:
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 65534
|
||||||
serviceAccountName: cluster-autoscaler
|
serviceAccountName: cluster-autoscaler
|
||||||
containers:
|
containers:
|
||||||
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.17.3
|
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.21.0
|
||||||
name: cluster-autoscaler
|
name: cluster-autoscaler
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
|
|
|
||||||
|
|
@ -137,9 +137,13 @@ spec:
|
||||||
prometheus.io/scrape: 'true'
|
prometheus.io/scrape: 'true'
|
||||||
prometheus.io/port: '8085'
|
prometheus.io/port: '8085'
|
||||||
spec:
|
spec:
|
||||||
|
priorityClassName: system-cluster-critical
|
||||||
|
securityContext:
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 65534
|
||||||
serviceAccountName: cluster-autoscaler
|
serviceAccountName: cluster-autoscaler
|
||||||
containers:
|
containers:
|
||||||
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.17.3
|
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.21.0
|
||||||
name: cluster-autoscaler
|
name: cluster-autoscaler
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
|
|
|
||||||
|
|
@ -137,6 +137,10 @@ spec:
|
||||||
prometheus.io/scrape: 'true'
|
prometheus.io/scrape: 'true'
|
||||||
prometheus.io/port: '8085'
|
prometheus.io/port: '8085'
|
||||||
spec:
|
spec:
|
||||||
|
priorityClassName: system-cluster-critical
|
||||||
|
securityContext:
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 65534
|
||||||
serviceAccountName: cluster-autoscaler
|
serviceAccountName: cluster-autoscaler
|
||||||
tolerations:
|
tolerations:
|
||||||
- effect: NoSchedule
|
- effect: NoSchedule
|
||||||
|
|
@ -146,7 +150,7 @@ spec:
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
kubernetes.io/role: master
|
kubernetes.io/role: master
|
||||||
containers:
|
containers:
|
||||||
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.17.3
|
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.21.0
|
||||||
name: cluster-autoscaler
|
name: cluster-autoscaler
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue