apiVersion: apps/v1
kind: DaemonSet
metadata:
  labels:
    app: apiserver
  name: apiserver
  namespace: kube-service-catalog
spec:
  selector:
    matchLabels:
      app: apiserver
  template:
    metadata:
      labels:
        app: apiserver
    spec:
      containers:
      - args:
        - apiserver
        - --storage-type
        - etcd
        - --secure-port
        - "6443"
        - --etcd-servers
        - https://master-000000:2379
        - https://master-000001:2379
        - https://master-000002:2379
        - --etcd-cafile
        - /etc/origin/master/master.etcd-ca.crt
        - --etcd-certfile
        - /etc/origin/master/master.etcd-client.crt
        - --etcd-keyfile
        - /etc/origin/master/master.etcd-client.key
        - -v
        - "3"
        - --cors-allowed-origins
        - localhost
        - --enable-admission-plugins
        - NamespaceLifecycle,DefaultServicePlan,ServiceBindingsLifecycle,ServicePlanChangeValidator,BrokerAuthSarCheck
        - --feature-gates
        - OriginatingIdentity=true
        - --feature-gates
        - NamespacedServiceBroker=true
        command:
        - /usr/bin/service-catalog
        image: '*** GENERATED ***'
        name: apiserver
        ports:
        - containerPort: 6443
        readinessProbe:
          failureThreshold: 2
          httpGet:
            path: /healthz
            port: 6443
            scheme: HTTPS
          periodSeconds: 5
        volumeMounts:
        - mountPath: /var/run/kubernetes-service-catalog
          name: apiserver-ssl
          readOnly: true
        - mountPath: /etc/origin/master
          name: etcd-host-cert
          readOnly: true
      nodeSelector:
        node-role.kubernetes.io/master: "true"
      serviceAccountName: service-catalog-apiserver
      volumes:
      - name: apiserver-ssl
        secret:
          items:
          - key: tls.crt
            path: apiserver.crt
          - key: tls.key
            path: apiserver.key
          secretName: apiserver-ssl
      - hostPath:
          path: /etc/origin/master
        name: etcd-host-cert
      - emptyDir: {}
        name: data-dir
