airship/airshipctl
Code Issues Proposed changes

Added customize K8s control plane configuration

Browse Source 
Closes: #594

Change-Id: Ie90c58a34c47ad517537f8b6492ff838b1f547fc
This commit is contained in:
Pallav Gupta 2021-06-21 08:12:55 -07:00
parent 8a15d048cf
commit ee9747d26f
1 changed files with 32 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
manifests/function/k8scontrol/controlplane.yaml
View File

@ -11,9 +11,40 @@ spec:
name: cluster-controlplane
kubeadmConfigSpec:
clusterConfiguration:
imageRepository: k8s.gcr.io
apiServer:
timeoutForControlPlane: 1000s
imageRepository: k8s.gcr.io
extraArgs:
allow-privileged: "true"
kubelet-preferred-address-types: InternalIP,ExternalIP,Hostname
authorization-mode: Node,RBAC
service-cluster-ip-range: 10.0.0.0/20
service-node-port-range: 80-32767
enable-admission-plugins: NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,ResourceQuota,DefaultTolerationSeconds,NodeRestriction
feature-gates: PodShareProcessNamespace=true
tls-cipher-suites: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA
tls-min-version: VersionTLS12
v: "2"
requestheader-group-headers: X-Remote-Group
requestheader-username-headers: X-Remote-User
requestheader-allowed-names: front-proxy-client
controllerManager:
extraArgs:
cluster-cidr: 192.168.16.0/20
node-monitor-period: 5s
node-monitor-grace-period: 20s
pod-eviction-timeout: 60s
terminated-pod-gc-threshold: "1000"
bind-address: 127.0.0.1
port: "0"
use-service-account-credentials: "true"
configure-cloud-routes: "false"
enable-hostpath-provisioner: "true"
v: "2"
networking:
dnsDomain: cluster.local
podSubnet: 192.168.16.0/20
serviceSubnet: 10.0.0.0/20
files:
- path: "/etc/systemd/system/containerd.service.d/http-proxy.conf"
content: |