apiVersion: v1
kind: Pod
metadata:
  name: kube-controller-manager
  namespace: kube-system
spec:
  hostNetwork: true
  containers:
  - name: kube-controller-manager
    image: {{kube_docker_registry}}/kube-controller-manager:{{kube-controller-manager_docker_tag}}
    imagePullPolicy: IfNotPresent
    resources:
      requests:
        cpu: 200m
    command:
    - /bin/sh
    - -c
    - /usr/local/bin/kube-controller-manager
      {{params}}
      1>>/var/log/kube-controller-manager.log 2>&1
    livenessProbe:
      httpGet:
        host: 127.0.0.1
        path: /healthz
        port: 10252
        scheme: HTTP
      initialDelaySeconds: 15
      timeoutSeconds: 15
    volumeMounts:
    - name: srvkube
      mountPath: /etc/srv/kubernetes
      readOnly: true
    - name: logfile
      mountPath: /var/log/kube-controller-manager.log
    - name: etcssl
      mountPath: /etc/ssl
      readOnly: true
    - name: usrsharecacerts
      mountPath: /usr/share/ca-certificates
      readOnly: true
  volumes:
  - name: srvkube
    hostPath:
      path: /etc/srv/kubernetes
  - name: logfile
    hostPath:
      path: /var/log/kube-controller-manager.log
  - name: etcssl
    hostPath:
      path: /etc/ssl
  - name: usrsharecacerts
    hostPath:
      path: /usr/share/ca-certificates