kathara-daemonset.yml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: kube-kathara-control-plane
  namespace: kube-system
  labels:
    name: kube-kathara-control-plane
spec:
  selector:
    matchLabels:
      name: kube-kathara-control-plane
  template:
    metadata:
      labels:
        name: kube-kathara-control-plane
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: kubernetes.io/os
                operator: In
                values:
                - linux
              - key: node-role.kubernetes.io/control-plane
                operator: Exists
      tolerations:
      - operator: Exists
        effect: NoSchedule
      containers:
        - name: kube-kathara-control-plane
          image: kathara/megalos-bgp-manager:latest
          imagePullPolicy: Always
          securityContext:
            capabilities:
              add:
                - NET_ADMIN
                - NET_RAW
                - SYS_ADMIN
          env:
            - name: IS_CONTROL_PLANE
              value: "true"
---
apiVersion: v1
kind: Service
metadata:
  name: kathara-master
  namespace: kube-system
  labels:
    name: kathara-master
spec:
  type: NodePort
  selector:
    name: kube-kathara-control-plane
  ports:
    - protocol: TCP
      port: 179
      targetPort: 179
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-kathara-worker-ds
  namespace: kube-system
  labels:
    k8s-app: kube-kathara-worker
spec:
  selector:
    matchLabels:
      name: kube-kathara-worker-ds
  template:
    metadata:
      labels:
        name: kube-kathara-worker-ds
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: kubernetes.io/os
                operator: In
                values:
                - linux
              - key: node-role.kubernetes.io/control-plane
                operator: DoesNotExist
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      containers:
        - name: kube-kathara-worker
          image: kathara/megalos-bgp-manager:latest
          imagePullPolicy: Always
          volumeMounts:
            - name: cnibin
              mountPath: /host/opt/cni/bin
          securityContext:
            privileged: true
            capabilities:
              add:
                - NET_ADMIN
                - NET_RAW
                - SYS_ADMIN
          env:
            - name: IS_CONTROL_PLANE
              value: "false"
            - name: NODE_IP
              valueFrom:
                fieldRef:
                  fieldPath: status.hostIP
      volumes:
        - name: cnibin
          hostPath:
            path: /opt/cni/bin