name: cpc-bridge-proxy
namespace: kube-system
uid: 747d5aff-94db-4936-9871-b2d0a3f3b451
resourceVersion: '111948508'
generation: 4
creationTimestamp: '2024-07-01T18:54:12Z'
labels:
  app: cpc-bridge-proxy
  c3.doks.digitalocean.com/component: cpc-bridge-proxy
  c3.doks.digitalocean.com/plane: data
  c3.doks.digitalocean.com/variant: legacy
  doks.digitalocean.com/managed: 'true'
annotations:
  deprecated.daemonset.template.generation: '4'

- name: cpc-bridge-proxy
  image: ghcr.io/digitalocean-packages/cpbridge:1.28.0
  resources:
    requests:
      cpu: 100m
      memory: 75Mi
  volumeMounts:
    - name: cpc-bridge-proxy-config
      readOnly: true
      mountPath: /etc/nginx
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  imagePullPolicy: IfNotPresent

currentNumberScheduled: 2
numberMisscheduled: 0
desiredNumberScheduled: 2
numberReady: 2
observedGeneration: 4
updatedNumberScheduled: 2
numberAvailable: 2

selector:
  matchLabels:
    app: cpc-bridge-proxy
template:
  metadata:
    creationTimestamp: null
    labels:
      app: cpc-bridge-proxy
      doks.digitalocean.com/managed: 'true'
    annotations:
      clusterlint.digitalocean.com/disabled-checks: resource-requirements
  spec:
    volumes:
      - name: cpc-bridge-proxy-config
        configMap:
          name: cpc-bridge-proxy-config
          defaultMode: 420
    initContainers:
      - name: init-iptables
        image: ghcr.io/digitalocean-packages/cpbridge:1.28.0
        command:
          - /bin/bash
          - '-c'
          - >
            set -o errexit

            set -o pipefail

            set -o nounset

            ipt_nat="iptables-legacy -t nat"

            # Avoid racing with kube-proxy on the initial iptables rules
            population which makes the rule order indeterministic.

            until ${ipt_nat} --list KUBE-SERVICES > /dev/null; do echo "waiting
            for kube-proxy to populate iptables rules"; sleep 3; done

            ipt_output_args="OUTPUT -p tcp -d 10.245.0.1/32 --dport 443 -j DNAT
            --to-destination 100.65.14.98:16443"

            ipt_prerouting_args="PREROUTING -p tcp -d 100.65.14.98 --dport 443
            -j DNAT --to-destination 100.65.14.98:16443"

            ${ipt_nat} --check ${ipt_output_args} || ${ipt_nat} --insert
            ${ipt_output_args}

            ${ipt_nat} --check ${ipt_prerouting_args} || ${ipt_nat} --insert
            ${ipt_prerouting_args}
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        imagePullPolicy: IfNotPresent
        securityContext:
          capabilities:
            add:
              - NET_ADMIN
    containers:
      - name: cpc-bridge-proxy
        image: ghcr.io/digitalocean-packages/cpbridge:1.28.0
        resources:
          requests:
            cpu: 100m
            memory: 75Mi
        volumeMounts:
          - name: cpc-bridge-proxy-config
            readOnly: true
            mountPath: /etc/nginx
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        imagePullPolicy: IfNotPresent
    restartPolicy: Always
    terminationGracePeriodSeconds: 30
    dnsPolicy: ClusterFirst
    automountServiceAccountToken: false
    hostNetwork: true
    securityContext: {}
    schedulerName: default-scheduler
    tolerations:
      - operator: Exists
    priorityClassName: system-node-critical
updateStrategy:
  type: RollingUpdate
  rollingUpdate:
    maxUnavailable: 1
    maxSurge: 0
revisionHistoryLimit: 10

metadata:
  name: cpc-bridge-proxy
  namespace: kube-system
  uid: 747d5aff-94db-4936-9871-b2d0a3f3b451
  resourceVersion: '111948508'
  generation: 4
  creationTimestamp: '2024-07-01T18:54:12Z'
  labels:
    app: cpc-bridge-proxy
    c3.doks.digitalocean.com/component: cpc-bridge-proxy
    c3.doks.digitalocean.com/plane: data
    c3.doks.digitalocean.com/variant: legacy
    doks.digitalocean.com/managed: 'true'
  annotations:
    deprecated.daemonset.template.generation: '4'
spec:
  selector:
    matchLabels:
      app: cpc-bridge-proxy
  template:
    metadata:
      creationTimestamp: null
      labels:
        app: cpc-bridge-proxy
        doks.digitalocean.com/managed: 'true'
      annotations:
        clusterlint.digitalocean.com/disabled-checks: resource-requirements
    spec:
      volumes:
        - name: cpc-bridge-proxy-config
          configMap:
            name: cpc-bridge-proxy-config
            defaultMode: 420
      initContainers:
        - name: init-iptables
          image: ghcr.io/digitalocean-packages/cpbridge:1.28.0
          command:
            - /bin/bash
            - '-c'
            - >
              set -o errexit

              set -o pipefail

              set -o nounset

              ipt_nat="iptables-legacy -t nat"

              # Avoid racing with kube-proxy on the initial iptables rules
              population which makes the rule order indeterministic.

              until ${ipt_nat} --list KUBE-SERVICES > /dev/null; do echo
              "waiting for kube-proxy to populate iptables rules"; sleep 3; done

              ipt_output_args="OUTPUT -p tcp -d 10.245.0.1/32 --dport 443 -j
              DNAT --to-destination 100.65.14.98:16443"

              ipt_prerouting_args="PREROUTING -p tcp -d 100.65.14.98 --dport 443
              -j DNAT --to-destination 100.65.14.98:16443"

              ${ipt_nat} --check ${ipt_output_args} || ${ipt_nat} --insert
              ${ipt_output_args}

              ${ipt_nat} --check ${ipt_prerouting_args} || ${ipt_nat} --insert
              ${ipt_prerouting_args}
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          imagePullPolicy: IfNotPresent
          securityContext:
            capabilities:
              add:
                - NET_ADMIN
      containers:
        - name: cpc-bridge-proxy
          image: ghcr.io/digitalocean-packages/cpbridge:1.28.0
          resources:
            requests:
              cpu: 100m
              memory: 75Mi
          volumeMounts:
            - name: cpc-bridge-proxy-config
              readOnly: true
              mountPath: /etc/nginx
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          imagePullPolicy: IfNotPresent
      restartPolicy: Always
      terminationGracePeriodSeconds: 30
      dnsPolicy: ClusterFirst
      automountServiceAccountToken: false
      hostNetwork: true
      securityContext: {}
      schedulerName: default-scheduler
      tolerations:
        - operator: Exists
      priorityClassName: system-node-critical
  updateStrategy:
    type: RollingUpdate
    rollingUpdate:
      maxUnavailable: 1
      maxSurge: 0
  revisionHistoryLimit: 10
status:
  currentNumberScheduled: 2
  numberMisscheduled: 0
  desiredNumberScheduled: 2
  numberReady: 2
  observedGeneration: 4
  updatedNumberScheduled: 2
  numberAvailable: 2