kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/roles/kubernetes/node/defaults/main.yml

60 lines
1.7 KiB
YAML
Raw Normal View History

Add host-based kubelet deployment Kubelet gets copied from hyperkube container and run locally.
2017-05-12 22:32:37 +08:00
# Valid options: docker (default), rkt, or host
kubelet_deployment_type: docker
Fix idempotency/recurrence of download and preinstall * Don't push containers if not changed * Do preinstall role only once and redistribute defaults to corresponding roles Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-10-24 21:11:52 +08:00
# change to 0.0.0.0 to enable insecure access from anywhere (not recommended)
kube_apiserver_insecure_bind_address: 127.0.0.1
Add variable kube_resolv_conf Allow configuration of a custom /etc/resolv.conf for kubelet.
2016-07-20 16:57:47 +08:00
# resolv.conf to base dns config
kube_resolv_conf: "/etc/resolv.conf"
use iptables as default proxy mode
2016-07-12 16:20:43 +08:00
kube_proxy_mode: iptables
Add api runtime config option, review kubernetes handlers
2015-11-27 19:32:31 +08:00
Disable kube_proxy_masquerade_all Fixes #1012
2017-02-10 18:16:19 +08:00
# If using the pure iptables proxy, SNAT everything. Note that it breaks any
# policy engine.
kube_proxy_masquerade_all: false
Add support for --masquerade-all in kube-proxy New boolean var `kube_proxy_masquerade_all` which enables/disables `--masquerade-all` argument for kube-proxy. Closes #524
2016-10-03 18:08:41 +08:00
Fix flannel for 1.6 and apply fixes to enable containerized kubelet
2017-04-05 18:47:03 +08:00
# These options reflect limitations of running kubelet in a container.
# Modify at your own risk
kubelet_enable_cri: false
kubelet_cgroups_per_qos: false
# Set to empty to avoid cgroup creation
Fix enforce-node-allocatable option Closes #1228 pods is default enforcement see https://kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/ add update
2017-07-19 22:57:36 +08:00
kubelet_enforce_node_allocatable: "\"\""
Fix flannel for 1.6 and apply fixes to enable containerized kubelet
2017-04-05 18:47:03 +08:00
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 22:44:44 +08:00
# Limits for kube components and nginx load balancer app
kubelet_memory_limit: 512M
kubelet_cpu_limit: 100m
Kubernetes Reliability Improvements - Exclude kubelet CPU/RAM (kube-reserved) from cgroup. It decreases a chance of overcommitment - Add a possibility to modify Kubelet node-status-update-frequency - Add a posibility to configure node-monitor-grace-period, node-monitor-period, pod-eviction-timeout for Kubernetes controller manager - Add Kubernetes Relaibility Documentation with recomendations for various scenarios. Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2017-02-07 22:01:02 +08:00
kubelet_status_update_frequency: 10s
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 22:44:44 +08:00
kube_proxy_memory_limit: 2000M
kube_proxy_cpu_limit: 500m
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines
2017-02-28 00:53:43 +08:00
kube_proxy_memory_requests: 64M
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 22:44:44 +08:00
kube_proxy_cpu_requests: 150m
nginx_memory_limit: 512M
nginx_cpu_limit: 300m
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines
2017-02-28 00:53:43 +08:00
nginx_memory_requests: 32M
Significantly reduce memory requirements Canal runs more pods and upgrades need a bit of extra room to load new pods in and get the old ones out.
2017-03-23 17:11:30 +08:00
nginx_cpu_requests: 25m
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 22:44:44 +08:00
Upgrade to docker 1.10.3
2016-03-17 17:22:52 +08:00
# kube_api_runtime_config:
# - extensions/v1beta1/daemonsets=true
# - extensions/v1beta1/deployments=true
use nginx proxy on non-master nodes to proxy apiserver traffic Also adds all masters by hostname and localhost/127.0.0.1 to apiserver SSL certificate. Includes documentation update on how localhost loadbalancer works.
2016-09-28 19:05:08 +08:00
nginx_image_repo: nginx
nginx_image_tag: 1.11.4-alpine
Adding /opt/cni /etc/cni to rkt run kubelet
2017-01-10 12:54:01 +08:00
etcd_config_dir: /etc/ssl/etcd
Prevent dynamic port allocation in nodePort range kube_apiserver_node_port_range should be accessible only to kube-proxy and not be taken by a dynamic port allocation. Potentially temporary if https://github.com/kubernetes/kubernetes/issues/40920 gets fixed.
2017-02-03 23:26:30 +08:00
# A port range to reserve for services with NodePort visibility.
# Inclusive at both ends of the range.
kube_apiserver_node_port_range: "30000-32767"
Make kubelet_load_modules always present but false. Update code and docs for that assumption.
2017-02-10 00:25:44 +08:00
kubelet_load_modules: false
add ability for custom flags
2017-04-15 05:33:04 +08:00
##Support custom flags to be passed to kubelet
Add host-based kubelet deployment Kubelet gets copied from hyperkube container and run locally.
2017-05-12 22:32:37 +08:00
kubelet_custom_flags: []
Set default value for kube_hyperkube_image_repo Fixes #1334
2017-06-08 05:09:36 +08:00
# This setting is used for rkt based kubelet for deploying hyperkube
# from a docker based registry ( controls --insecure and docker:// )
## Empty vaule for quay.io containers
## docker for docker registry containers
kube_hyperkube_image_repo: ""