27 lines
1.0 KiB
Django/Jinja
27 lines
1.0 KiB
Django/Jinja
###
|
|
# kubernetes system config
|
|
#
|
|
# The following values are used to configure the kube-apiserver
|
|
#
|
|
|
|
# The address on the local server to listen to.
|
|
KUBE_API_ADDRESS="--insecure-bind-address=127.0.0.1"
|
|
|
|
# The port on the local server to listen on.
|
|
KUBE_API_PORT="--secure-port=443"
|
|
|
|
# Port nodes listen on
|
|
# KUBELET_PORT="--kubelet_port=10250"
|
|
|
|
# Address range to use for services
|
|
KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range={{ kube_service_addresses }}"
|
|
|
|
# Location of the etcd cluster
|
|
KUBE_ETCD_SERVERS="--etcd_servers={% for node in groups['etcd'] %}http://{{ node }}:2379{% if not loop.last %},{% endif %}{% endfor %}"
|
|
|
|
# default admission control policies
|
|
KUBE_ADMISSION_CONTROL="--admission_control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota"
|
|
|
|
# Add your own!
|
|
KUBE_API_ARGS="--tls_cert_file={{ kube_cert_dir }}/server.cert --tls_private_key_file={{ kube_cert_dir }}/server.key --client_ca_file={{ kube_cert_dir }}/ca.crt --token_auth_file={{ kube_config_dir }}/known_tokens.csv"
|