2019-07-13 11:01:08 +08:00
|
|
|
kind: KubeletConfiguration
|
|
|
|
|
apiVersion: kubelet.config.k8s.io/v1beta1
|
|
|
|
|
address: {{ inventory_hostname }}
|
|
|
|
|
authentication:
|
|
|
|
|
anonymous:
|
|
|
|
|
enabled: false
|
|
|
|
|
webhook:
|
|
|
|
|
cacheTTL: 2m0s
|
|
|
|
|
enabled: true
|
|
|
|
|
x509:
|
|
|
|
|
clientCAFile: {{ ca_dir }}/ca.pem
|
|
|
|
|
authorization:
|
|
|
|
|
mode: Webhook
|
|
|
|
|
webhook:
|
|
|
|
|
cacheAuthorizedTTL: 5m0s
|
|
|
|
|
cacheUnauthorizedTTL: 30s
|
2020-05-23 17:58:32 +08:00
|
|
|
cgroupDriver: cgroupfs
|
2019-07-13 11:01:08 +08:00
|
|
|
cgroupsPerQOS: true
|
|
|
|
|
clusterDNS:
|
|
|
|
|
- {{ CLUSTER_DNS_SVC_IP }}
|
|
|
|
|
clusterDomain: {{ CLUSTER_DNS_DOMAIN }}
|
|
|
|
|
configMapAndSecretChangeDetectionStrategy: Watch
|
|
|
|
|
containerLogMaxFiles: 3
|
|
|
|
|
containerLogMaxSize: 10Mi
|
|
|
|
|
enforceNodeAllocatable:
|
|
|
|
|
- pods
|
|
|
|
|
{% if KUBE_RESERVED_ENABLED == "yes" %}
|
|
|
|
|
- kube-reserved
|
|
|
|
|
{% endif %}
|
|
|
|
|
{% if SYS_RESERVED_ENABLED == "yes" %}
|
|
|
|
|
- system-reserved
|
|
|
|
|
{% endif %}
|
|
|
|
|
eventBurst: 10
|
|
|
|
|
eventRecordQPS: 5
|
|
|
|
|
evictionHard:
|
|
|
|
|
imagefs.available: 15%
|
2020-05-23 15:16:01 +08:00
|
|
|
memory.available: 300Mi
|
2019-07-13 11:01:08 +08:00
|
|
|
nodefs.available: 10%
|
|
|
|
|
nodefs.inodesFree: 5%
|
|
|
|
|
evictionPressureTransitionPeriod: 5m0s
|
|
|
|
|
failSwapOn: true
|
|
|
|
|
fileCheckFrequency: 40s
|
|
|
|
|
hairpinMode: hairpin-veth
|
|
|
|
|
healthzBindAddress: {{ inventory_hostname }}
|
|
|
|
|
healthzPort: 10248
|
|
|
|
|
httpCheckFrequency: 40s
|
|
|
|
|
imageGCHighThresholdPercent: 85
|
|
|
|
|
imageGCLowThresholdPercent: 80
|
|
|
|
|
imageMinimumGCAge: 2m0s
|
|
|
|
|
{% if KUBE_RESERVED_ENABLED == "yes" %}
|
2020-05-23 15:16:01 +08:00
|
|
|
kubeReservedCgroup: /podruntime.slice
|
|
|
|
|
kubeReserved:
|
|
|
|
|
memory: 400Mi
|
2019-07-13 11:01:08 +08:00
|
|
|
{% endif %}
|
|
|
|
|
kubeAPIBurst: 100
|
|
|
|
|
kubeAPIQPS: 50
|
|
|
|
|
makeIPTablesUtilChains: true
|
|
|
|
|
maxOpenFiles: 1000000
|
|
|
|
|
maxPods: {{ MAX_PODS }}
|
|
|
|
|
nodeLeaseDurationSeconds: 40
|
|
|
|
|
nodeStatusReportFrequency: 1m0s
|
|
|
|
|
nodeStatusUpdateFrequency: 10s
|
|
|
|
|
oomScoreAdj: -999
|
|
|
|
|
podPidsLimit: -1
|
|
|
|
|
port: 10250
|
2020-02-01 10:06:07 +08:00
|
|
|
# disable readOnlyPort
|
|
|
|
|
readOnlyPort: 0
|
2019-07-18 10:33:19 +08:00
|
|
|
{% if ansible_distribution_release == "bionic" %}
|
|
|
|
|
resolvConf: /run/systemd/resolve/resolv.conf
|
|
|
|
|
{% else %}
|
2019-07-13 11:01:08 +08:00
|
|
|
resolvConf: /etc/resolv.conf
|
2019-07-18 10:33:19 +08:00
|
|
|
{% endif %}
|
2019-07-13 11:01:08 +08:00
|
|
|
runtimeRequestTimeout: 2m0s
|
|
|
|
|
serializeImagePulls: true
|
|
|
|
|
streamingConnectionIdleTimeout: 4h0m0s
|
|
|
|
|
syncFrequency: 1m0s
|
|
|
|
|
{% if SYS_RESERVED_ENABLED == "yes" %}
|
|
|
|
|
systemReservedCgroup: /system.slice
|
2020-05-23 15:16:01 +08:00
|
|
|
systemReserved:
|
|
|
|
|
memory: 1000Mi
|
2019-07-13 11:01:08 +08:00
|
|
|
{% endif %}
|
|
|
|
|
tlsCertFile: {{ ca_dir }}/kubelet.pem
|
|
|
|
|
tlsPrivateKeyFile: {{ ca_dir }}/kubelet-key.pem
|
