kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/roles/adduser/defaults/main.yml

28 lines
608 B
YAML
Raw Normal View History

turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources.
2016-05-23 06:25:52 +08:00
---
feat: make kubernetes owner parametrized (#8952) * feat: make kubernetes owner parametrized * docs: update hardening guide with configuration for CIS 1.1.19 * fix: set etcd data directory permissions to be compliant to CIS 1.1.12
2022-06-17 16:34:32 +08:00
kube_owner: kube
Rework inventory all by real groups' vars * Leave all.yml to keep only optional vars * Store groups' specific vars by existing group names * Fix optional vars casted as mandatory (add default()) * Fix missing defaults for an optional IP var * Relink group_vars for terraform to reflect changes Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2016-12-27 23:39:00 +08:00
kube_cert_group: kube-cert
Make etcd data dir configurable. Closes: #1073 Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-24 22:58:54 +08:00
etcd_data_dir: "/var/lib/etcd"
Rework inventory all by real groups' vars * Leave all.yml to keep only optional vars * Store groups' specific vars by existing group names * Fix optional vars casted as mandatory (add default()) * Fix missing defaults for an optional IP var * Relink group_vars for terraform to reflect changes Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2016-12-27 23:39:00 +08:00
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources.
2016-05-23 06:25:52 +08:00
addusers:
etcd:
Revert "Drop linux capabilities and rework users/groups"
2017-02-06 20:58:54 +08:00
name: etcd
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources.
2016-05-23 06:25:52 +08:00
comment: "Etcd user"
fix useradd etcd (#5281)
2019-11-11 19:27:41 +08:00
createhome: no
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources.
2016-05-23 06:25:52 +08:00
system: yes
Fix nologin wrong path (#6272)
2020-06-16 17:30:04 +08:00
shell: /sbin/nologin
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources.
2016-05-23 06:25:52 +08:00
kube:
Revert "Drop linux capabilities and rework users/groups"
2017-02-06 20:58:54 +08:00
name: kube
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources.
2016-05-23 06:25:52 +08:00
comment: "Kubernetes user"
Fix nologin wrong path (#6272)
2020-06-16 17:30:04 +08:00
createhome: no
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources.
2016-05-23 06:25:52 +08:00
system: yes
Fix nologin wrong path (#6272)
2020-06-16 17:30:04 +08:00
shell: /sbin/nologin
Revert "Drop linux capabilities and rework users/groups"
2017-02-06 20:58:54 +08:00
group: "{{ kube_cert_group }}"
turn adduser/download roles into meta roles This should make things a little more composable, by making these roles meta roles that perform no actions by default we allow each role to own its own resources.
2016-05-23 06:25:52 +08:00
adduser:
name: "{{ user.name }}"
group: "{{ user.name|default(None) }}"
comment: "{{ user.comment|default(None) }}"
shell: "{{ user.shell|default(None) }}"
system: "{{ user.system|default(None) }}"
createhome: "{{ user.createhome|default(None) }}"