apiVersion: v1
kind: ConfigMap
metadata:
  name: kuryrctl-config
data:
  default: |
    [DEFAULT]
    debug = true
  kubernetes: |
    [kubernetes]
    api_root = https://127.0.0.1:6443
    token_file = /var/run/secrets/kubernetes.io/serviceaccount/token
    ssl_ca_crt_file = /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
    ssl_verify_server_crt = false
  neutron: |
    [neutron]
    memcached_servers = 127.0.0.1:11211
    signing_dir = /var/cache/kuryr
    cafile = /opt/stack/data/ca-bundle.pem
    auth_uri = http://127.0.0.1/identity
    project_domain_name = Default
    project_name = admin
    user_domain_name = Default
    password = pass
    username = admin
    auth_url = http://127.0.0.1/identity
    auth_type = password
  neutron_defaults: |
    [neutron_defaults]
    ovs_bridge = br-int
    service_subnet =  e12650d5-2398-4de4-a4d2-5e22b2f3fcc1
    pod_security_groups = db0a1406-381a-45ff-ac8b-93c1dc4337a4
    pod_subnet = cfd4e52a-c704-40c9-987a-1da1aeb5a12b
    project = 5dbfbcdf9af74653b548221262bd5bf8
  pod_vif_nested: |
    [pod_vif_nested]
    worker_nodes_subnet = 4bc17518-b544-4797-a3cd-b3c7b0bddc63
  binding: |
    [binding]
    driver = kuryr.lib.binding.drivers.vlan
    link_iface = eth0
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: cni-config
data:
  default: |
    [DEFAULT]
    use_stderr = true
  kubernetes: |
    [kubernetes]
    api_root = https://127.0.0.1:6443
    token_file = /etc/kuryr/token
    ssl_ca_crt_file = /etc/kuryr/ca.crt
    ssl_verify_server_crt = true
  binding: |
    [binding]
    driver = kuryr.lib.binding.drivers.vlan
    link_iface = eth0
---
apiVersion: v1
kind: ReplicationController
metadata:
  labels:
    name: kuryrctl
  name: kuryrctl
spec:
  replicas: 1
  selector:
    name: kuryrctl
  template:
    metadata:
      labels:
        name: kuryrctl
      name: kuryrctl
    spec:
      serviceAccountName: kuryrctl
      automountServiceAccountToken: true
      hostNetwork: true
      containers:
      - image: kuryr/controller:a50bf74d
        name: controller
        terminationMessagePath: "/dev/termination-log"
        volumeMounts:
        - mountPath: "/etc/kuryr"
          name: config-volume
      volumes:
      - name: config-volume
        configMap:
          name: kuryrctl-config
          items:
          - key: default
            path: default.conf
          - key: kubernetes
            path: kubernetes.conf
          - key: neutron
            path: neutron.conf
          - key: neutron_defaults
            path: neutron_defaults.conf
          - key: binding
            path: binding.conf
      restartPolicy: Always
---
apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
  name: kuryr-cni-ds
  namespace: kube-system
  labels:
    tier: node
    app: kuryr
spec:
  template:
    metadata:
      labels:
        tier: node
        app: kuryr
    spec:
      hostNetwork: true
      nodeSelector:
        beta.kubernetes.io/arch: amd64
      tolerations:
      - key: node-role.kubernetes.io/master
        operator: Exists
        effect: NoSchedule
      serviceAccountName: kuryrctl
      containers:
      - name: kuryr-cni
        image: kuryr/cni:a50bf74d
        command: [ "cni_ds_init" ]
        securityContext:
          privileged: true
        volumeMounts:
        - name: bin
          mountPath: /opt/cni/bin
        - name: net-conf
          mountPath: /etc/cni/net.d
        - name: config-volume
          mountPath: /tmp/kuryr
        - name: etc