ansible/roles/kubelet/templates/common-config.yaml.j2

   1 apiVersion: kubelet.config.k8s.io/v1beta1
   2 kind: KubeletConfiguration
   3 address: "{{ networking.infra_internal.ip }}"
   4 authentication:
   5   x509:
   6     clientCAFile: "/etc/openssl/ca.pem"
   7   webhook:
   8     enabled: true
   9   anonymous:
  10     enabled: false
  11 authorization:
  12   mode: "AlwaysAllow"
  13 cgroupsPerQOS: true
  14 cgroupRoot: "/"
  15 cgroupDriver: cgroupfs
  16 clusterDNS:
  17 - {{ caas.dns_svc_ip }}
  18 clusterDomain: {{ caas.dns_domain }}
  19 kubeReserved:
  20   cpu: "{{ kube_reserved_cpu }}"
  21 rotateCertificates: true
  22 runtimeRequestTimeout: 5m0s
  23 staticPodPath: "/etc/kubernetes/manifests"
  24 streamingConnectionIdleTimeout: 5m0s
  25 systemReserved:
  26   cpu: "{{ system_reserved_cpu }}"
  27 tlsCertFile: "/etc/kubernetes/ssl/kubelet-server.pem"
  28 tlsPrivateKeyFile: "/etc/kubernetes/ssl/kubelet-server-key.pem"