- "--apiserver-count={{ groups['caas_master']|length|int }}"
- "--audit-policy-file={{ caas.caas_policy_directory }}/audit-policy.yaml"
- "--audit-log-format=json"
- - "--audit-log-maxbackup=10"
- - "--audit-log-maxsize=100"
+ - "--audit-log-maxsize={{ caas.audit_log_file_size }}"
+ - "--audit-log-maxbackup={{ ((audit_disc_size.stdout|int*caas.caas_max_audit_size)/caas.audit_log_file_size)|int }}"
- "--audit-log-path=/var/log/audit/kube_apiserver/kube-apiserver-audit.log"
- "--authorization-mode=Node,RBAC"
- "--bind-address={{ apiserver }}"
- "--client-ca-file=/etc/openssl/ca.pem"
- "--enable-bootstrap-token-auth=true"
- - "--etcd-servers=http://{{ hostvars[hostname]['networking']['infra_internal']['ip'] }}:{{ caas.etcd_proxy_port }}{% for host in ( groups['caas_master'] | reject('search', hostname) ) %},http://{{ hostvars[host]['networking']['infra_internal']['ip'] }}:{{ caas.etcd_proxy_port }}{% endfor %}"
+ - "--etcd-cafile=/etc/etcd/ssl/ca.pem"
+ - "--etcd-certfile=/etc/etcd/ssl/etcd{{ nodeindex }}.pem"
+ - "--etcd-keyfile=/etc/etcd/ssl/etcd{{ nodeindex }}-key.pem"
+ - "--etcd-servers=https://{{ hostvars[hostname]['networking']['infra_internal']['ip'] }}:{{ caas.etcd_api_port }}{% for host in ( groups['caas_master'] | reject('search', hostname) ) %},https://{{ hostvars[host]['networking']['infra_internal']['ip'] }}:{{ caas.etcd_api_port }}{% endfor %}"
- "--experimental-encryption-provider-config={{ caas.cert_path }}/{{ caas._secrets_conf }}"
- "--feature-gates={{ apiserver_feature_gates | get_kube_options }}"
- "--insecure-port=0"