apiVersion: v1
kind: Pod
metadata:
  name: k8s-api-healthz
  namespace: kube-system
  annotations:
    scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
  hostNetwork: true
  priorityClassName: system-node-critical
  containers:
    - name: k8s-api-healthz
      env:
      - name: HOST_IP
        valueFrom:
          fieldRef:
            fieldPath: status.podIP
      command:
        - /k8s-api-healthz
        - --api-endpoint="https://$(HOST_IP):443/healthz"
      image: quay.io/giantswarm/k8s-api-healthz:1c0cdf1ed5ee18fdf59063ecdd84bf3787f80fac
      resources:
        requests:
          cpu: 50m
          memory: 20Mi
      volumeMounts:
      - mountPath: /etc/kubernetes/ssl/
        name: ssl-certs-kubernetes
        readOnly: true
  volumes:
  - hostPath:
      path: /etc/kubernetes/ssl
    name: ssl-certs-kubernetes
