k3s/cluster/addons/metadata-proxy/gce/metadata-proxy.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: metadata-proxy
  namespace: kube-system
  labels:
    k8s-app: metadata-proxy
    kubernetes.io/cluster-service: "true"
    addonmanager.kubernetes.io/mode: Reconcile
---
apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
  name: metadata-proxy-v0.1
  namespace: kube-system
  labels:
    k8s-app: metadata-proxy
    kubernetes.io/cluster-service: "true"
    addonmanager.kubernetes.io/mode: Reconcile
    version: v0.1
spec:
  updateStrategy:
    type: RollingUpdate
  template:
    metadata:
      labels:
        k8s-app: metadata-proxy
        kubernetes.io/cluster-service: "true"
        version: v0.1
      # This annotation ensures that the proxy does not get evicted if the node
      # supports critical pod annotation based priority scheme.
      # Note that this does not guarantee admission on the nodes (#40573).
      annotations:
        scheduler.alpha.kubernetes.io/critical-pod: ''
    spec:
      serviceAccountName: metadata-proxy
      hostNetwork: true
      dnsPolicy: Default
      containers:
      - name: metadata-proxy
        image: gcr.io/google_containers/metadata-proxy:v0.1.4
        securityContext:
          privileged: true
        resources:
          requests:
            memory: "16Mi"
            cpu: "15m"
          limits:
            memory: "16Mi"
            cpu: "15m"
      # BEGIN_PROMETHEUS_TO_SD
      - name: prometheus-to-sd-exporter
        image: gcr.io/google_containers/prometheus-to-sd:v0.2.2
        command:
          - /monitor
          - --stackdriver-prefix={{ prometheus_to_sd_prefix }}/addons
          - --api-override={{ prometheus_to_sd_endpoint }}
          - --source=metadata_proxy:http://127.0.0.1:989?whitelisted=request_count
        resources:
          requests:
            memory: "16Mi"
            cpu: "15m"
          limits:
            memory: "16Mi"
            cpu: "15m"
      # END_PROMETHEUS_TO_SD
      nodeSelector:
        beta.kubernetes.io/metadata-proxy-ready: "true"
      terminationGracePeriodSeconds: 30