mode: 0644
path: "/etc/kubernetes/manifests/apiserver-watcher.yaml"
contents:
  inline: |
    apiVersion: v1
    kind: Pod
    metadata:
      name: apiserver-watcher
      namespace: kube-system
    spec:
      containers:
      - name: apiserver-watcher
        image: "{{.Images.apiServerWatcherKey}}"
        command: ["apiserver-watcher"]
        args:
        - "run"
        - "--health-check-url={{.Infra.Status.APIServerInternalURL}}/readyz"
        resources:
          requests:
            cpu: 20m
            memory: 50Mi
        terminationMessagePolicy: FallbackToLogsOnError
        securityContext:
          privileged: true
        volumeMounts:
        - mountPath: /rootfs
          name: rootfs
      hostNetwork: true
      hostPID: true
      priorityClassName: system-node-critical
      tolerations:
      - operator: "Exists"
      restartPolicy: Always
      volumes:
      - name: rootfs
        hostPath:
          path: /

