ansible/roles/kubelet/templates/common-config.yaml.j2

   1 apiVersion: kubelet.config.k8s.io/v1beta1
   2 kind: KubeletConfiguration
   3 address: "{{ networking.infra_internal.ip }}"
   4 authentication:
   5   x509:
   6     clientCAFile: "/etc/openssl/ca.pem"
   7   webhook:
   8     enabled: true
   9   anonymous:
  10     enabled: false
  11 authorization:
  12   mode: "AlwaysAllow"
  13 cgroupsPerQOS: true
  14 cgroupRoot: "/"
  15 cgroupDriver: cgroupfs
  16 clusterDNS:
  17 - {{ caas.dns_svc_ip }}
  18 clusterDomain: {{ caas.dns_domain }}
  19 evictionHard:
  20   memory.available: "{{ caas_hard_eviction_threshold }}"
  21 evictionMinimumReclaim:
  22   memory.available: "512Mi"
  23 evictionSoft:
  24   memory.available: "{{ caas_soft_eviction_threshold }}"
  25 evictionSoftGracePeriod:
  26   memory.available: "30s"
  27 kubeReserved:
  28   cpu: "{{ kube_reserved_cpu }}"
  29 rotateCertificates: true
  30 runtimeRequestTimeout: 5m0s
  31 staticPodPath: "/etc/kubernetes/manifests"
  32 streamingConnectionIdleTimeout: 5m0s
  33 systemReserved:
  34   cpu: "{{ system_reserved_cpu }}"
  35   memory: "{{ system_reserved_memory }}"
  36 tlsCertFile: "/etc/kubernetes/ssl/kubelet-server.pem"
  37 tlsPrivateKeyFile: "/etc/kubernetes/ssl/kubelet-server-key.pem"