mirror of
https://github.com/kubernetes-sigs/node-feature-discovery.git
synced 2025-03-15 04:57:56 +00:00
Sync nfd-worker-job.template with others
Add TLS placeholders.
This commit is contained in:
parent
83e2a9defb
commit
f72ec8f9b2
1 changed files with 21 additions and 0 deletions
|
@ -43,6 +43,13 @@ spec:
|
||||||
args:
|
args:
|
||||||
- "--oneshot"
|
- "--oneshot"
|
||||||
- "--server=nfd-master:8080"
|
- "--server=nfd-master:8080"
|
||||||
|
## Enable TLS authentication (1/3)
|
||||||
|
## The example below assumes having the root certificate named ca.crt stored in
|
||||||
|
## a ConfigMap named nfd-ca-cert, and, the TLS authentication credentials stored
|
||||||
|
## in a TLS Secret named nfd-worker-cert
|
||||||
|
# - "--ca-file=/etc/kubernetes/node-feature-discovery/trust/ca.crt"
|
||||||
|
# - "--key-file=/etc/kubernetes/node-feature-discovery/certs/tls.key"
|
||||||
|
# - "--cert-file=/etc/kubernetes/node-feature-discovery/certs/tls.crt"
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: host-boot
|
- name: host-boot
|
||||||
mountPath: "/host-boot"
|
mountPath: "/host-boot"
|
||||||
|
@ -59,6 +66,13 @@ spec:
|
||||||
- name: features-d
|
- name: features-d
|
||||||
mountPath: "/etc/kubernetes/node-feature-discovery/features.d/"
|
mountPath: "/etc/kubernetes/node-feature-discovery/features.d/"
|
||||||
readOnly: true
|
readOnly: true
|
||||||
|
## Enable TLS authentication (2/3)
|
||||||
|
# - name: nfd-ca-cert
|
||||||
|
# mountPath: "/etc/kubernetes/node-feature-discovery/trust"
|
||||||
|
# readOnly: true
|
||||||
|
# - name: nfd-worker-cert
|
||||||
|
# mountPath: "/etc/kubernetes/node-feature-discovery/certs"
|
||||||
|
# readOnly: true
|
||||||
restartPolicy: Never
|
restartPolicy: Never
|
||||||
volumes:
|
volumes:
|
||||||
- name: host-boot
|
- name: host-boot
|
||||||
|
@ -76,3 +90,10 @@ spec:
|
||||||
- name: features-d
|
- name: features-d
|
||||||
hostPath:
|
hostPath:
|
||||||
path: "/etc/kubernetes/node-feature-discovery/features.d/"
|
path: "/etc/kubernetes/node-feature-discovery/features.d/"
|
||||||
|
## Enable TLS authentication (3/3)
|
||||||
|
# - name: nfd-ca-cert
|
||||||
|
# configMap:
|
||||||
|
# name: nfd-ca-cert
|
||||||
|
# - name: nfd-worker-cert
|
||||||
|
# secret:
|
||||||
|
# secretName: nfd-worker-cert
|
||||||
|
|
Loading…
Add table
Reference in a new issue