diff --git a/contrib/kustomize/components/image-stable/kustomization.yaml b/contrib/kustomize/components/image-stable/kustomization.yaml new file mode 100644 index 00000000..c4f7494a --- /dev/null +++ b/contrib/kustomize/components/image-stable/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1alpha1 +kind: Component +images: + - name: '*' + newTag: v0.10.0 +patches: + - target: + kind: DaemonSet + patch: | + - op: replace + path: /spec/template/spec/containers/0/imagePullPolicy + value: IfNotPresent diff --git a/contrib/kustomize/components/image-unstable/kustomization.yaml b/contrib/kustomize/components/image-unstable/kustomization.yaml new file mode 100644 index 00000000..eeb78e65 --- /dev/null +++ b/contrib/kustomize/components/image-unstable/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1alpha1 +kind: Component +images: + - name: '*' + newTag: unstable +patches: + - target: + kind: DaemonSet + patch: | + - op: replace + path: /spec/template/spec/containers/0/imagePullPolicy + value: Always diff --git a/contrib/kustomize/device-injector/base/daemonset.yaml b/contrib/kustomize/device-injector/base/daemonset.yaml new file mode 100644 index 00000000..936fd7c8 --- /dev/null +++ b/contrib/kustomize/device-injector/base/daemonset.yaml @@ -0,0 +1,31 @@ +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: nri-plugin-device-injector +spec: + template: + spec: + priorityClassName: system-node-critical + containers: + - name: plugin + image: plugin:latest + args: + - "-idx" + - "10" + resources: + requests: + cpu: "2m" + memory: "5Mi" + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + volumeMounts: + - name: nri-socket + mountPath: /var/run/nri/nri.sock + volumes: + - name: nri-socket + hostPath: + path: /var/run/nri/nri.sock + type: Socket diff --git a/contrib/kustomize/device-injector/base/kustomization.yaml b/contrib/kustomize/device-injector/base/kustomization.yaml new file mode 100644 index 00000000..54b4aa03 --- /dev/null +++ b/contrib/kustomize/device-injector/base/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kube-system +resources: + - daemonset.yaml +images: + - name: plugin + newName: ghcr.io/containerd/nri/plugins/device-injector +labels: + - includeSelectors: true + pairs: + app.kubernetes.io/name: nri-plugin-device-injector diff --git a/contrib/kustomize/device-injector/kustomization.yaml b/contrib/kustomize/device-injector/kustomization.yaml new file mode 100644 index 00000000..59fa03d6 --- /dev/null +++ b/contrib/kustomize/device-injector/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - base/ +components: + - ../components/image-stable diff --git a/contrib/kustomize/device-injector/unstable/kustomization.yaml b/contrib/kustomize/device-injector/unstable/kustomization.yaml new file mode 100644 index 00000000..a087a396 --- /dev/null +++ b/contrib/kustomize/device-injector/unstable/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base/ +components: + - ../../components/image-unstable diff --git a/contrib/kustomize/differ/base/daemonset.yaml b/contrib/kustomize/differ/base/daemonset.yaml new file mode 100644 index 00000000..e0642da1 --- /dev/null +++ b/contrib/kustomize/differ/base/daemonset.yaml @@ -0,0 +1,28 @@ +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: nri-plugin-differ +spec: + template: + spec: + containers: + - name: plugin + image: plugin:latest + args: [] + resources: + requests: + cpu: "2m" + memory: "5Mi" + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + volumeMounts: + - name: nri-socket + mountPath: /var/run/nri/nri.sock + volumes: + - name: nri-socket + hostPath: + path: /var/run/nri/nri.sock + type: Socket diff --git a/contrib/kustomize/differ/base/kustomization.yaml b/contrib/kustomize/differ/base/kustomization.yaml new file mode 100644 index 00000000..4ed4d97c --- /dev/null +++ b/contrib/kustomize/differ/base/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kube-system +resources: + - daemonset.yaml +images: + - name: plugin + newName: ghcr.io/containerd/nri/plugins/differ +labels: + - includeSelectors: true + pairs: + app.kubernetes.io/name: nri-plugin-device-injector diff --git a/contrib/kustomize/differ/kustomization.yaml b/contrib/kustomize/differ/kustomization.yaml new file mode 100644 index 00000000..59fa03d6 --- /dev/null +++ b/contrib/kustomize/differ/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - base/ +components: + - ../components/image-stable diff --git a/contrib/kustomize/differ/unstable/kustomization.yaml b/contrib/kustomize/differ/unstable/kustomization.yaml new file mode 100644 index 00000000..a087a396 --- /dev/null +++ b/contrib/kustomize/differ/unstable/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base/ +components: + - ../../components/image-unstable diff --git a/contrib/kustomize/hook-injector/base/daemonset.yaml b/contrib/kustomize/hook-injector/base/daemonset.yaml new file mode 100644 index 00000000..2f753e8d --- /dev/null +++ b/contrib/kustomize/hook-injector/base/daemonset.yaml @@ -0,0 +1,52 @@ +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: nri-plugin-hook-injector +spec: + template: + spec: + priorityClassName: system-node-critical + containers: + - name: plugin + image: plugin:latest + args: + - "-idx" + - "10" + resources: + requests: + cpu: "2m" + memory: "5Mi" + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + volumeMounts: + - name: nri-socket + mountPath: /var/run/nri/nri.sock + - name: etc-hooks-d + mountPath: /etc/containers/oci/hooks.d + readOnly: true + - name: usr-share-hooks-d + mountPath: /usr/share/containers/oci/hooks.d + readOnly: true + - name: libexec-hooks-d + mountPath: /usr/libexec/oci/hooks.d + readOnly: true + volumes: + - name: nri-socket + hostPath: + path: /var/run/nri/nri.sock + type: Socket + - name: etc-hooks-d + hostPath: + path: /etc/containers/oci/hooks.d + type: DirectoryOrCreate + - name: usr-share-hooks-d + hostPath: + path: /usr/share/containers/oci/hooks.d + type: DirectoryOrCreate + - name: libexec-hooks-d + hostPath: + path: /usr/libexec/oci/hooks.d + type: DirectoryOrCreate diff --git a/contrib/kustomize/hook-injector/base/kustomization.yaml b/contrib/kustomize/hook-injector/base/kustomization.yaml new file mode 100644 index 00000000..efb99c69 --- /dev/null +++ b/contrib/kustomize/hook-injector/base/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kube-system +resources: + - daemonset.yaml +images: + - name: plugin + newName: ghcr.io/containerd/nri/plugins/hook-injector +labels: + - includeSelectors: true + pairs: + app.kubernetes.io/name: nri-plugin-hook-injector diff --git a/contrib/kustomize/hook-injector/kustomization.yaml b/contrib/kustomize/hook-injector/kustomization.yaml new file mode 100644 index 00000000..59fa03d6 --- /dev/null +++ b/contrib/kustomize/hook-injector/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - base/ +components: + - ../components/image-stable diff --git a/contrib/kustomize/hook-injector/unstable/kustomization.yaml b/contrib/kustomize/hook-injector/unstable/kustomization.yaml new file mode 100644 index 00000000..a087a396 --- /dev/null +++ b/contrib/kustomize/hook-injector/unstable/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base/ +components: + - ../../components/image-unstable diff --git a/contrib/kustomize/logger/base/daemonset.yaml b/contrib/kustomize/logger/base/daemonset.yaml new file mode 100644 index 00000000..08d982e9 --- /dev/null +++ b/contrib/kustomize/logger/base/daemonset.yaml @@ -0,0 +1,32 @@ +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: nri-plugin-logger +spec: + template: + spec: + containers: + - name: plugin + image: plugin:latest + args: + - "-idx" + - "10" + - "-events" + - "RunPodSandbox,StopPodSandbox,RemovePodSandbox,CreateContainer,PostCreateContainer,StartContainer,PostStartContainer,UpdateContainer,PostUpdateContainer,StopContainer,RemoveContainer" + resources: + requests: + cpu: "2m" + memory: "5Mi" + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + volumeMounts: + - name: nri-socket + mountPath: /var/run/nri/nri.sock + volumes: + - name: nri-socket + hostPath: + path: /var/run/nri/nri.sock + type: Socket diff --git a/contrib/kustomize/logger/base/kustomization.yaml b/contrib/kustomize/logger/base/kustomization.yaml new file mode 100644 index 00000000..b65fdeb3 --- /dev/null +++ b/contrib/kustomize/logger/base/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kube-system +resources: + - daemonset.yaml +images: + - name: plugin + newName: ghcr.io/containerd/nri/plugins/logger +labels: + - includeSelectors: true + pairs: + app.kubernetes.io/name: nri-plugin-logger diff --git a/contrib/kustomize/logger/kustomization.yaml b/contrib/kustomize/logger/kustomization.yaml new file mode 100644 index 00000000..59fa03d6 --- /dev/null +++ b/contrib/kustomize/logger/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - base/ +components: + - ../components/image-stable diff --git a/contrib/kustomize/logger/unstable/kustomization.yaml b/contrib/kustomize/logger/unstable/kustomization.yaml new file mode 100644 index 00000000..a087a396 --- /dev/null +++ b/contrib/kustomize/logger/unstable/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base/ +components: + - ../../components/image-unstable diff --git a/contrib/kustomize/network-device-injector/base/daemonset.yaml b/contrib/kustomize/network-device-injector/base/daemonset.yaml new file mode 100644 index 00000000..560b883c --- /dev/null +++ b/contrib/kustomize/network-device-injector/base/daemonset.yaml @@ -0,0 +1,31 @@ +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: nri-plugin-network-device-injector +spec: + template: + spec: + priorityClassName: system-node-critical + containers: + - name: plugin + image: plugin:latest + args: + - "-idx" + - "10" + resources: + requests: + cpu: "2m" + memory: "5Mi" + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + volumeMounts: + - name: nri-socket + mountPath: /var/run/nri/nri.sock + volumes: + - name: nri-socket + hostPath: + path: /var/run/nri/nri.sock + type: Socket diff --git a/contrib/kustomize/network-device-injector/base/kustomization.yaml b/contrib/kustomize/network-device-injector/base/kustomization.yaml new file mode 100644 index 00000000..614561bb --- /dev/null +++ b/contrib/kustomize/network-device-injector/base/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kube-system +resources: + - daemonset.yaml +images: + - name: plugin + newName: ghcr.io/containerd/nri/plugins/network-device-injector +labels: + - includeSelectors: true + pairs: + app.kubernetes.io/name: nri-plugin-network-device-injector diff --git a/contrib/kustomize/network-device-injector/kustomization.yaml b/contrib/kustomize/network-device-injector/kustomization.yaml new file mode 100644 index 00000000..59fa03d6 --- /dev/null +++ b/contrib/kustomize/network-device-injector/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - base/ +components: + - ../components/image-stable diff --git a/contrib/kustomize/network-device-injector/unstable/kustomization.yaml b/contrib/kustomize/network-device-injector/unstable/kustomization.yaml new file mode 100644 index 00000000..a087a396 --- /dev/null +++ b/contrib/kustomize/network-device-injector/unstable/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base/ +components: + - ../../components/image-unstable diff --git a/contrib/kustomize/network-logger/base/daemonset.yaml b/contrib/kustomize/network-logger/base/daemonset.yaml new file mode 100644 index 00000000..ba441d7c --- /dev/null +++ b/contrib/kustomize/network-logger/base/daemonset.yaml @@ -0,0 +1,30 @@ +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: nri-plugin-network-logger +spec: + template: + spec: + containers: + - name: plugin + image: plugin:latest + args: + - "-idx" + - "10" + resources: + requests: + cpu: "2m" + memory: "5Mi" + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + volumeMounts: + - name: nri-socket + mountPath: /var/run/nri/nri.sock + volumes: + - name: nri-socket + hostPath: + path: /var/run/nri/nri.sock + type: Socket diff --git a/contrib/kustomize/network-logger/base/kustomization.yaml b/contrib/kustomize/network-logger/base/kustomization.yaml new file mode 100644 index 00000000..c4caa627 --- /dev/null +++ b/contrib/kustomize/network-logger/base/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kube-system +resources: + - daemonset.yaml +images: + - name: plugin + newName: ghcr.io/containerd/nri/plugins/network-logger +labels: + - includeSelectors: true + pairs: + app.kubernetes.io/name: nri-plugin-network-logger diff --git a/contrib/kustomize/network-logger/kustomization.yaml b/contrib/kustomize/network-logger/kustomization.yaml new file mode 100644 index 00000000..59fa03d6 --- /dev/null +++ b/contrib/kustomize/network-logger/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - base/ +components: + - ../components/image-stable diff --git a/contrib/kustomize/network-logger/unstable/kustomization.yaml b/contrib/kustomize/network-logger/unstable/kustomization.yaml new file mode 100644 index 00000000..a087a396 --- /dev/null +++ b/contrib/kustomize/network-logger/unstable/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base/ +components: + - ../../components/image-unstable diff --git a/contrib/kustomize/template/base/daemonset.yaml b/contrib/kustomize/template/base/daemonset.yaml new file mode 100644 index 00000000..f3bd1275 --- /dev/null +++ b/contrib/kustomize/template/base/daemonset.yaml @@ -0,0 +1,30 @@ +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: nri-plugin-template +spec: + template: + spec: + containers: + - name: plugin + image: plugin:latest + args: + - "-idx" + - "10" + resources: + requests: + cpu: "2m" + memory: "5Mi" + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + volumeMounts: + - name: nri-socket + mountPath: /var/run/nri/nri.sock + volumes: + - name: nri-socket + hostPath: + path: /var/run/nri/nri.sock + type: Socket diff --git a/contrib/kustomize/template/base/kustomization.yaml b/contrib/kustomize/template/base/kustomization.yaml new file mode 100644 index 00000000..1cfada08 --- /dev/null +++ b/contrib/kustomize/template/base/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kube-system +resources: + - daemonset.yaml +images: + - name: plugin + newName: ghcr.io/containerd/nri/plugins/template +labels: + - includeSelectors: true + pairs: + app.kubernetes.io/name: nri-plugin-template diff --git a/contrib/kustomize/template/kustomization.yaml b/contrib/kustomize/template/kustomization.yaml new file mode 100644 index 00000000..59fa03d6 --- /dev/null +++ b/contrib/kustomize/template/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - base/ +components: + - ../components/image-stable diff --git a/contrib/kustomize/template/unstable/kustomization.yaml b/contrib/kustomize/template/unstable/kustomization.yaml new file mode 100644 index 00000000..a087a396 --- /dev/null +++ b/contrib/kustomize/template/unstable/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base/ +components: + - ../../components/image-unstable diff --git a/contrib/kustomize/ulimit-adjuster/base/daemonset.yaml b/contrib/kustomize/ulimit-adjuster/base/daemonset.yaml new file mode 100644 index 00000000..67cf61cd --- /dev/null +++ b/contrib/kustomize/ulimit-adjuster/base/daemonset.yaml @@ -0,0 +1,31 @@ +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: nri-plugin-ulimit-adjuster +spec: + template: + spec: + priorityClassName: system-node-critical + containers: + - name: plugin + image: plugin:latest + args: + - "-idx" + - "10" + resources: + requests: + cpu: "2m" + memory: "5Mi" + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + volumeMounts: + - name: nri-socket + mountPath: /var/run/nri/nri.sock + volumes: + - name: nri-socket + hostPath: + path: /var/run/nri/nri.sock + type: Socket diff --git a/contrib/kustomize/ulimit-adjuster/base/kustomization.yaml b/contrib/kustomize/ulimit-adjuster/base/kustomization.yaml new file mode 100644 index 00000000..e539b7ff --- /dev/null +++ b/contrib/kustomize/ulimit-adjuster/base/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kube-system +resources: + - daemonset.yaml +images: + - name: plugin + newName: ghcr.io/containerd/nri/plugins/ulimit-adjuster +labels: + - includeSelectors: true + pairs: + app.kubernetes.io/name: nri-plugin-ulimit-adjuster diff --git a/contrib/kustomize/ulimit-adjuster/kustomization.yaml b/contrib/kustomize/ulimit-adjuster/kustomization.yaml new file mode 100644 index 00000000..59fa03d6 --- /dev/null +++ b/contrib/kustomize/ulimit-adjuster/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - base/ +components: + - ../components/image-stable diff --git a/contrib/kustomize/ulimit-adjuster/unstable/kustomization.yaml b/contrib/kustomize/ulimit-adjuster/unstable/kustomization.yaml new file mode 100644 index 00000000..a087a396 --- /dev/null +++ b/contrib/kustomize/ulimit-adjuster/unstable/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base/ +components: + - ../../components/image-unstable diff --git a/contrib/kustomize/v010-adapter/base/daemonset.yaml b/contrib/kustomize/v010-adapter/base/daemonset.yaml new file mode 100644 index 00000000..eb62253e --- /dev/null +++ b/contrib/kustomize/v010-adapter/base/daemonset.yaml @@ -0,0 +1,45 @@ +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: nri-plugin-v010-adapter +spec: + template: + spec: + priorityClassName: system-node-critical + containers: + - name: plugin + image: plugin:latest + args: + - "-idx" + - "10" + resources: + requests: + cpu: "2m" + memory: "5Mi" + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + volumeMounts: + - name: nri-socket + mountPath: /var/run/nri/nri.sock + - name: nri-v010-config + mountPath: /etc/nri/conf.json + readOnly: true + - name: nri-v010-plugins + mountPath: /opt/nri/bin + readOnly: true + volumes: + - name: nri-socket + hostPath: + path: /var/run/nri/nri.sock + type: Socket + - name: nri-v010-config + hostPath: + path: /etc/nri/conf.json + type: File + - name: nri-v010-plugins + hostPath: + path: /opt/nri/bin + type: DirectoryOrCreate diff --git a/contrib/kustomize/v010-adapter/base/kustomization.yaml b/contrib/kustomize/v010-adapter/base/kustomization.yaml new file mode 100644 index 00000000..97cbc27e --- /dev/null +++ b/contrib/kustomize/v010-adapter/base/kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: kube-system +resources: + - daemonset.yaml +images: + - name: plugin + newName: ghcr.io/containerd/nri/plugins/v010-adapter +labels: + - includeSelectors: true + pairs: + app.kubernetes.io/name: nri-plugin-v010-adapter diff --git a/contrib/kustomize/v010-adapter/kustomization.yaml b/contrib/kustomize/v010-adapter/kustomization.yaml new file mode 100644 index 00000000..59fa03d6 --- /dev/null +++ b/contrib/kustomize/v010-adapter/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - base/ +components: + - ../components/image-stable diff --git a/contrib/kustomize/v010-adapter/unstable/kustomization.yaml b/contrib/kustomize/v010-adapter/unstable/kustomization.yaml new file mode 100644 index 00000000..a087a396 --- /dev/null +++ b/contrib/kustomize/v010-adapter/unstable/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base/ +components: + - ../../components/image-unstable