You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Creating a Secret with this content and then asking Sveltos to deploy it, does not fully work.
Because of extra white spaces after ---, the ServiceAccount is not deployed.
---
apiVersion: v1kind: ServiceAccount
apiVersion: apiextensions.k8s.io/v1kind: CustomResourceDefinitionmetadata:
name: network-attachment-definitions.k8s.cni.cncf.iospec:
group: k8s.cni.cncf.ioscope: Namespacednames:
plural: network-attachment-definitionssingular: network-attachment-definitionkind: NetworkAttachmentDefinitionshortNames:
- net-attach-defversions:
- name: v1served: truestorage: trueschema:
openAPIV3Schema:
description: 'NetworkAttachmentDefinition is a CRD schema specified by the Network Plumbing Working Group to express the intent for attaching pods to one or more logical or physical networks. More information available at: https://github.com/k8snetworkplumbingwg/multi-net-spec'type: objectproperties:
apiVersion:
description: 'APIVersion defines the versioned schema of this represen tation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'type: stringkind:
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'type: stringmetadata:
type: objectspec:
description: 'NetworkAttachmentDefinition spec defines the desired state of a network attachment'type: objectproperties:
config:
description: 'NetworkAttachmentDefinition config is a JSON-formatted CNI configuration'type: string
---
apiVersion: v1kind: ServiceAccountmetadata:
name: multusnamespace: kube-system
---
kind: ClusterRoleapiVersion: rbac.authorization.k8s.io/v1metadata:
name: multusrules:
- apiGroups: ["k8s.cni.cncf.io"]resources:
- '*'verbs:
- '*'
- apiGroups:
- ""resources:
- pods
- pods/statusverbs:
- get
- update
- apiGroups:
- ""
- events.k8s.ioresources:
- eventsverbs:
- create
- patch
- update
---
kind: ClusterRoleBindingapiVersion: rbac.authorization.k8s.io/v1metadata:
name: multusroleRef:
apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: multussubjects:
- kind: ServiceAccountname: multusnamespace: kube-system
---
apiVersion: apps/v1kind: DaemonSetmetadata:
name: kube-multus-dsnamespace: kube-systemlabels:
tier: nodeapp: multusname: multusspec:
selector:
matchLabels:
name: multusupdateStrategy:
type: RollingUpdatetemplate:
metadata:
labels:
tier: nodeapp: multusname: multusspec:
hostNetwork: truehostPID: truetolerations:
- operator: Existseffect: NoSchedule
- operator: Existseffect: NoExecuteserviceAccountName: multuscontainers:
- name: kube-multusimage: ghcr.io/k8snetworkplumbingwg/multus-cni:v4.0.2-thickcommand: ["/usr/src/multus-cni/bin/multus-daemon"]resources:
requests:
cpu: "100m"memory: "200Mi"limits:
cpu: "100m"memory: "200Mi"securityContext:
privileged: truevolumeMounts:
- name: cnimountPath: /host/etc/cni/net.d
- name: host-runmountPath: /host/run
- name: host-var-lib-cni-multusmountPath: /var/lib/cni/multus
- name: host-var-lib-kubeletmountPath: /var/lib/kubelet
- name: host-run-k8s-cni-cncf-iomountPath: /run/k8s.cni.cncf.io
- name: host-run-netnsmountPath: /run/netnsmountPropagation: HostToContainer
- name: multus-daemon-configmountPath: /etc/cni/net.d/multus.dreadOnly: true
- name: hostrootmountPath: /hostrootmountPropagation: HostToContainerinitContainers:
- name: install-multus-binaryimage: ghcr.io/k8snetworkplumbingwg/multus-cni:v4.0.2-thickcommand:
- "cp"
- "/usr/src/multus-cni/bin/multus-shim"
- "/host/opt/cni/bin/multus-shim"resources:
requests:
cpu: "10m"memory: "15Mi"securityContext:
privileged: truevolumeMounts:
- name: cnibinmountPath: /host/opt/cni/binmountPropagation: BidirectionalterminationGracePeriodSeconds: 10volumes:
- name: cnihostPath:
path: /etc/cni/net.d
- name: cnibinhostPath:
path: /opt/cni/bin
- name: hostroothostPath:
path: /
- name: multus-daemon-configconfigMap:
name: multus-daemon-configitems:
- key: daemon-config.jsonpath: daemon-config.json
- name: host-runhostPath:
path: /run
- name: host-var-lib-cni-multushostPath:
path: /var/lib/cni/multus
- name: host-var-lib-kubelethostPath:
path: /var/lib/kubelet
- name: host-run-k8s-cni-cncf-iohostPath:
path: /run/k8s.cni.cncf.io
- name: host-run-netnshostPath:
path: /run/netns/
The text was updated successfully, but these errors were encountered:
Problem Description
Creating a Secret with this content and then asking Sveltos to deploy it, does not fully work.
Because of extra white spaces after ---, the ServiceAccount is not deployed.
The text was updated successfully, but these errors were encountered: