mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2025-12-14 13:54:37 +03:00
9b122fb5a8
* Use alternate self-sufficient shellcheck precommit This pre-commit does not require prerequisite on the host, making it easier to run in CI workflows. * Switch to upstream ansible-lint pre-commit hook This way, the hook is self contained and does not depend on a previous virtualenv installation. * pre-commit: fix hooks dependencies - ansible-syntax-check - tox-inventory-builder - jinja-syntax-check * Fix ci-matrix pre-commit hook - Remove dependency of pydblite which fails to setup on recent pythons - Discard shell script and put everything into pre-commit * pre-commit: apply autofixes hooks and fix the rest manually - markdownlint (manual fix) - end-of-file-fixer - requirements-txt-fixer - trailing-whitespace * Convert check_typo to pre-commit + use maintained version client9/misspell is unmaintained, and has been forked by the golangci team, see https://github.com/client9/misspell/issues/197#issuecomment-1596318684. They haven't yet added a pre-commit config, so use my fork with the pre-commit hook config until the pull request is merged. * collection-build-install convert to pre-commit * Run pre-commit hooks in dynamic pipeline Use gitlab dynamic child pipelines feature to have one source of truth for the pre-commit jobs, the pre-commit config file. Use one cache per pre-commit. This should reduce the "fetching cache" time steps in gitlab-ci, since each job will have a separate cache with only its hook installed. * Remove gitlab-ci job done in pre-commit * pre-commit: adjust mardownlint default, md fixes Use a style file as recommended by upstream. This makes for only one source of truth. Conserve previous upstream default for MD007 (upstream default changed here https://github.com/markdownlint/markdownlint/pull/373) * Update pre-commit hooks --------- Co-authored-by: Max Gautier <mg@max.gautier.name>
113 lines
3.7 KiB
Django/Jinja
113 lines
3.7 KiB
Django/Jinja
kind: DaemonSet
|
|
apiVersion: apps/v1
|
|
metadata:
|
|
name: csi-gce-pd-node
|
|
namespace: kube-system
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: gcp-compute-persistent-disk-csi-driver
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: gcp-compute-persistent-disk-csi-driver
|
|
spec:
|
|
# Host network must be used for interaction with Workload Identity in GKE
|
|
# since it replaces GCE Metadata Server with GKE Metadata Server. Remove
|
|
# this requirement when issue is resolved and before any exposure of
|
|
# metrics ports.
|
|
hostNetwork: true
|
|
priorityClassName: csi-gce-pd-node
|
|
serviceAccountName: csi-gce-pd-node-sa
|
|
containers:
|
|
- name: csi-driver-registrar
|
|
image: {{ csi_node_driver_registrar_image_repo }}:{{ csi_node_driver_registrar_image_tag }}
|
|
args:
|
|
- "--v=5"
|
|
- "--csi-address=/csi/csi.sock"
|
|
- "--kubelet-registration-path=/var/lib/kubelet/plugins/pd.csi.storage.gke.io/csi.sock"
|
|
lifecycle:
|
|
preStop:
|
|
exec:
|
|
command: ["/bin/sh", "-c", "rm -rf /registration/pd.csi.storage.gke.io /registration/pd.csi.storage.gke.io-reg.sock"]
|
|
env:
|
|
- name: KUBE_NODE_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: spec.nodeName
|
|
volumeMounts:
|
|
- name: plugin-dir
|
|
mountPath: /csi
|
|
- name: registration-dir
|
|
mountPath: /registration
|
|
- name: gce-pd-driver
|
|
securityContext:
|
|
privileged: true
|
|
# Don't change base image without changing pdImagePlaceholder in
|
|
# test/k8s-integration/main.go
|
|
image: {{ gcp_pd_csi_plugin_image_repo }}:{{ gcp_pd_csi_plugin_image_tag }}
|
|
args:
|
|
- "--v=5"
|
|
- "--endpoint=unix:/csi/csi.sock"
|
|
- "--run-controller-service=false"
|
|
volumeMounts:
|
|
- name: kubelet-dir
|
|
mountPath: /var/lib/kubelet
|
|
mountPropagation: "Bidirectional"
|
|
- name: plugin-dir
|
|
mountPath: /csi
|
|
- name: device-dir
|
|
mountPath: /dev
|
|
# The following mounts are required to trigger host udevadm from
|
|
# container
|
|
- name: udev-rules-etc
|
|
mountPath: /etc/udev
|
|
- name: udev-rules-lib
|
|
mountPath: /lib/udev
|
|
- name: udev-socket
|
|
mountPath: /run/udev
|
|
- name: sys
|
|
mountPath: /sys
|
|
nodeSelector:
|
|
kubernetes.io/os: linux
|
|
volumes:
|
|
- name: registration-dir
|
|
hostPath:
|
|
path: /var/lib/kubelet/plugins_registry/
|
|
type: Directory
|
|
- name: kubelet-dir
|
|
hostPath:
|
|
path: /var/lib/kubelet
|
|
type: Directory
|
|
- name: plugin-dir
|
|
hostPath:
|
|
path: /var/lib/kubelet/plugins/pd.csi.storage.gke.io/
|
|
type: DirectoryOrCreate
|
|
- name: device-dir
|
|
hostPath:
|
|
path: /dev
|
|
type: Directory
|
|
# The following mounts are required to trigger host udevadm from
|
|
# container
|
|
- name: udev-rules-etc
|
|
hostPath:
|
|
path: /etc/udev
|
|
type: Directory
|
|
- name: udev-rules-lib
|
|
hostPath:
|
|
path: /lib/udev
|
|
type: Directory
|
|
- name: udev-socket
|
|
hostPath:
|
|
path: /run/udev
|
|
type: Directory
|
|
- name: sys
|
|
hostPath:
|
|
path: /sys
|
|
type: Directory
|
|
# https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
|
# See "special case". This will tolerate everything. Node component should
|
|
# be scheduled on all nodes.
|
|
tolerations:
|
|
- operator: Exists
|