X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;f=ansible%2Froles%2Fkube_master%2Ftemplates%2Fcm.yml;h=f9d9d3255818c277b6c5b6a8ad26002ccd520919;hb=e79c146d970397bdcb4f66051b3109701f7845b4;hp=ddd616ad215b3c422b72e4a4dfe1a743dc3f14ae;hpb=8321feb501701dcb4023e3c052cb6a982d5db3fa;p=ta%2Fcaas-kubernetes.git

diff --git a/ansible/roles/kube_master/templates/cm.yml b/ansible/roles/kube_master/templates/cm.yml
index ddd616a..f9d9d32 100644
--- a/ansible/roles/kube_master/templates/cm.yml
+++ b/ansible/roles/kube_master/templates/cm.yml
@@ -35,7 +35,7 @@ spec:
         - "--service-account-private-key-file=/etc/kubernetes/ssl/service-account-key.pem"
         - "--root-ca-file=/etc/openssl/ca.pem"
         - "{% if groups['caas_master']|length|int > 1 %}--leader-elect=true{% endif %}"
-        - "--cluster-cidr=10.244.0.0/16"
+        - "--cluster-cidr={{ caas.oam_cidr }}"
         - "--use-service-account-credentials=true"
         - "--allocate-node-cidrs=true"
         - "--cluster-signing-cert-file=/etc/openssl/ca.pem"
@@ -47,7 +47,13 @@ spec:
           port: 10252
         initialDelaySeconds: 15
         timeoutSeconds: 1
+      resources:
+        requests:
+          cpu: "10m"
       volumeMounts:
+        - name: time-mount
+          mountPath: /etc/localtime
+          readOnly: true
         - name: secret-kubernetes
           mountPath: /etc/kubernetes/ssl
           readOnly: true
@@ -61,6 +67,9 @@ spec:
           mountPath: /etc/kubernetes/kubeconfig
           readOnly: true
   volumes:
+    - name: time-mount
+      hostPath:
+        path: /etc/localtime
     - name: secret-kubernetes
       hostPath:
         path: /etc/kubernetes/ssl