Use the default node-proxier cr

docs/kube-proxy.yaml

@@ -13,51 +13,13 @@ metadata:
   name: kube-proxy
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: kube-proxy
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - endpoints
-  - services
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  - events.k8s.io
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-  - update
-- apiGroups:
-  - discovery.k8s.io
-  resources:
-  - endpointslices
-  verbs:
-  - list
-  - watch
----
-apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: kube-proxy
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: kube-proxy
+  name: system:node-proxier
 subjects:
 - apiGroup: ''
   kind: ServiceAccount
@@ -106,31 +68,20 @@ apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   labels:
-    component: kube-proxy
     k8s-app: kube-proxy
-    kubernetes.io/cluster-service: "true"
-    name: kube-proxy
-    tier: node
   name: kube-proxy
   namespace: kube-proxy
 spec:
   selector:
     matchLabels:
-      component: kube-proxy
       k8s-app: kube-proxy
-      kubernetes.io/cluster-service: "true"
-      name: kube-proxy
-      tier: node
   template:
     metadata:
       labels:
-        component: kube-proxy
         k8s-app: kube-proxy
-        kubernetes.io/cluster-service: "true"
-        name: kube-proxy
-        tier: node
     spec:
       serviceAccount: kube-proxy
+      priorityClassName: system-node-critical
       tolerations:
         - effect: NoExecute
           operator: Exists