Compress image using xz
[ta/caas-kubernetes.git] / ansible / roles / kubelet / templates / common-config.yaml.j2
1 apiVersion: kubelet.config.k8s.io/v1beta1
2 kind: KubeletConfiguration
3 address: "{{ networking.infra_internal.ip }}"
4 authentication:
5   x509:
6     clientCAFile: "/etc/openssl/ca.pem"
7   webhook:
8     enabled: true
9   anonymous:
10     enabled: false
11 authorization:
12   mode: "AlwaysAllow"
13 cgroupsPerQOS: true
14 cgroupRoot: "/"
15 cgroupDriver: cgroupfs
16 clusterDNS:
17 - {{ caas.dns_svc_ip }}
18 clusterDomain: {{ caas.dns_domain }}
19 evictionHard:
20   memory.available: "{{ caas_hard_eviction_threshold }}"
21 evictionMinimumReclaim:
22   memory.available: "512Mi"
23 evictionSoft:
24   memory.available: "{{ caas_soft_eviction_threshold }}"
25 evictionSoftGracePeriod:
26   memory.available: "30s"
27 kubeReserved:
28   cpu: "{{ kube_reserved_cpu }}"
29 rotateCertificates: true
30 runtimeRequestTimeout: 5m0s
31 staticPodPath: "/etc/kubernetes/manifests"
32 streamingConnectionIdleTimeout: 5m0s
33 systemReserved:
34   cpu: "{{ system_reserved_cpu }}"
35   memory: "{{ system_reserved_memory }}"
36 tlsCertFile: "/etc/kubernetes/ssl/kubelet-server.pem"
37 tlsPrivateKeyFile: "/etc/kubernetes/ssl/kubelet-server-key.pem"