central-deploy.yaml

kind: Deployment
apiVersion: apps/v1
metadata:
  name: ovn-central
  namespace: {{ .Values.namespace }}
  annotations:
    kubernetes.io/description: |
      OVN components: northd, nb and sb.
spec:
  replicas: {{ .Values.replicaCount }}
  strategy:
    rollingUpdate:
      maxSurge: 0
      maxUnavailable: 1
    type: RollingUpdate
  selector:
    matchLabels:
      app: ovn-central
  template:
    metadata:
      labels:
        app: ovn-central
        component: network
        type: infra
    spec:
      tolerations:
        - effect: NoSchedule
          operator: Exists
        - effect: NoExecute
          operator: Exists
        - key: CriticalAddonsOnly
          operator: Exists
      affinity:
        podAntiAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchLabels:
                  app: ovn-central
              topologyKey: kubernetes.io/hostname
      priorityClassName: system-cluster-critical
      serviceAccountName: ovn-ovs
      hostNetwork: true
      containers:
        - name: ovn-central
          image: {{ .Values.global.registry.address }}/{{ .Values.global.images.kubeovn.repository }}:{{ .Values.global.images.kubeovn.tag }}
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          command: 
          - /kube-ovn/start-db.sh
          securityContext:
            capabilities:
              add: ["SYS_NICE"]
          env:
            - name: ENABLE_SSL
              value: "{{ .Values.networking.ENABLE_SSL }}"
            - name: NODE_IPS
              value: "{{ .Values.MASTER_NODES }}"
            - name: POD_IP
              valueFrom:
                fieldRef:
                  fieldPath: status.podIP
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
            - name: POD_NAMESPACE
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
            - name: POD_IPS
              valueFrom:
                fieldRef:
                  fieldPath: status.podIPs
            - name: ENABLE_BIND_LOCAL_IP
              value: "{{- .Values.func.ENABLE_BIND_LOCAL_IP }}"
            - name: PROBE_INTERVAL
              value: "{{ .Values.networking.PROBE_INTERVAL }}"
            - name: OVN_LEADER_PROBE_INTERVAL
              value: "{{ .Values.networking.OVN_LEADER_PROBE_INTERVAL }}"
            - name: OVN_NORTHD_N_THREADS
              value: "{{ .Values.networking.OVN_NORTHD_N_THREADS }}"
            - name: ENABLE_COMPACT
              value: "{{ .Values.networking.ENABLE_COMPACT }}"
            {{- if include "kubeovn.ovs-ovn.updateStrategy" . | eq "OnDelete" }}
            - name: OVN_VERSION_COMPATIBILITY
              value: "22.03"
            {{- end }}
          resources:
            requests:
            {{- if .Release.IsUpgrade }}
              cpu: {{ (index (lookup "apps/v1" "Deployment" "kube-system" "ovn-central").spec.template.spec.containers 0).resources.requests.cpu | quote }}
              memory: {{ (index (lookup "apps/v1" "Deployment" "kube-system" "ovn-central").spec.template.spec.containers 0).resources.requests.memory | quote }}
            {{- else }}
              cpu: {{ index .Values "ovn-central" "requests" "cpu" }}
              memory: {{ index .Values "ovn-central" "requests" "memory" }}
            {{- end }}
            limits:
            {{- if .Release.IsUpgrade }}
              cpu: {{ (index (lookup "apps/v1" "Deployment" "kube-system" "ovn-central").spec.template.spec.containers 0).resources.limits.cpu | quote }}
              memory: {{ (index (lookup "apps/v1" "Deployment" "kube-system" "ovn-central").spec.template.spec.containers 0).resources.limits.memory | quote }}
            {{- else }}
              cpu: {{ index .Values "ovn-central" "limits" "cpu" }}
              memory: {{ index .Values "ovn-central" "limits" "memory" }}
            {{- end }}
          volumeMounts:
            - mountPath: /var/run/openvswitch
              name: host-run-ovs
            - mountPath: /var/run/ovn
              name: host-run-ovn
            - mountPath: /sys
              name: host-sys
              readOnly: true
            - mountPath: /etc/openvswitch
              name: host-config-openvswitch
            - mountPath: /etc/ovn
              name: host-config-ovn
            - mountPath: /var/log/openvswitch
              name: host-log-ovs
            - mountPath: /var/log/ovn
              name: host-log-ovn
            - mountPath: /etc/localtime
              name: localtime
              readOnly: true
            - mountPath: /var/run/tls
              name: kube-ovn-tls
          readinessProbe:
            exec:
              command:
                - bash
                - /kube-ovn/ovn-healthcheck.sh
            periodSeconds: 15
            timeoutSeconds: 45
          livenessProbe:
            exec:
              command:
                - bash
                - /kube-ovn/ovn-healthcheck.sh
            initialDelaySeconds: 30
            periodSeconds: 15
            failureThreshold: 5
            timeoutSeconds: 45
      nodeSelector:
        kubernetes.io/os: "linux"
        kube-ovn/role: "master"
      volumes:
        - name: host-run-ovs
          hostPath:
            path: /run/openvswitch
        - name: host-run-ovn
          hostPath:
            path: /run/ovn
        - name: host-sys
          hostPath:
            path: /sys
        - name: host-config-openvswitch
          hostPath:
            path: /etc/origin/openvswitch
        - name: host-config-ovn
          hostPath:
            path: /etc/origin/ovn
        - name: host-log-ovs
          hostPath:
            path: {{ .Values.log_conf.LOG_DIR }}/openvswitch
        - name: host-log-ovn
          hostPath:
            path: {{ .Values.log_conf.LOG_DIR }}/ovn
        - name: localtime
          hostPath:
            path: /etc/localtime
        - name: kube-ovn-tls
          secret:
            optional: true
            secretName: kube-ovn-tls