ibm-cloud-controller-manager.yaml

# ******************************************************************************
# IBM Cloud Kubernetes Service, 5737-D43
# (C) Copyright IBM Corp. 2021, 2025 All Rights Reserved.
#
# SPDX-License-Identifier: Apache2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# ******************************************************************************
---
apiVersion: v1
kind: Secret
metadata:
  name: ibm-cloud-controller-manager
type: Opaque
data:
  ca.crt: REDACTED
  ibm-cloud-config.ini: REDACTED
  kubeconfig: REDACTED
  server.crt: REDACTED
  server.key: REDACTED
---
kind: Deployment
apiVersion: apps/v1
metadata:
  name: ibm-cloud-controller-manager
  labels:
    app: ibm-cloud-controller-manager
spec:
  replicas: 3
  minReadySeconds: 30
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxUnavailable: 1
      maxSurge: 0
  selector:
    matchLabels:
      app: ibm-cloud-controller-manager
  template:
    metadata:
      labels:
        app: ibm-cloud-controller-manager
    spec:
      affinity:
        podAntiAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchExpressions:
                  - key: app
                    operator: In
                    values: ["ibm-cloud-controller-manager"]
              topologyKey: "kubernetes.io/hostname"
            - labelSelector:
                matchExpressions:
                  - key: app
                    operator: In
                    values: ["ibm-cloud-controller-manager"]
              topologyKey: "topology.kubernetes.io/zone"
      automountServiceAccountToken: false
      terminationGracePeriodSeconds: 90
      containers:
        - name: ibm-cloud-controller-manager
          image: registry.ng.bluemix.net/armada-master/ibm-cloud-controller-manager:v1.33.0-alpha.2-1
          imagePullPolicy: IfNotPresent
          securityContext:
            runAsNonRoot: true
            runAsGroup: 0
          command:
            - /bin/ibm-cloud-controller-manager
            - --port=0
            - --use-service-account-credentials=true
            - --kubeconfig=/etc/kubernetes/kubeconfig
            - --authentication-kubeconfig=/etc/kubernetes/kubeconfig
            - --authorization-kubeconfig=/etc/kubernetes/kubeconfig
            - --client-ca-file=/etc/kubernetes/ca.crt
            - --requestheader-client-ca-file=/etc/kubernetes/ca.crt
            - --tls-cert-file=/etc/kubernetes/server.crt
            - --tls-private-key-file=/etc/kubernetes/server.key
            - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_AES_128_GCM_SHA256,TLS_CHACHA20_POLY1305_SHA256,TLS_AES_256_GCM_SHA384
            - --cloud-provider=ibm
            - --cloud-config=/etc/kubernetes/ibm-cloud-config.ini
            - --profiling=false
            - --leader-elect=true
            - --leader-elect-lease-duration=60s
            - --leader-elect-renew-deadline=25s
            - --leader-elect-retry-period=5s
            - --v=2
            - --kube-api-burst=125
            - --kube-api-qps=100
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 10258
              scheme: HTTPS
            initialDelaySeconds: 300
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 160
          resources:
            requests:
              cpu: 75m
              memory: 60Mi
          volumeMounts:
            - mountPath: /etc/kubernetes/
              name: secret
      volumes:
        - secret:
            secretName: ibm-cloud-controller-manager
            defaultMode: 0640
          name: secret