2018-02-17 11:37:47 +08:00
|
|
|
kind: ConfigMap
|
|
|
|
|
apiVersion: v1
|
|
|
|
|
metadata:
|
|
|
|
|
name: cilium-config
|
2018-03-30 19:29:13 +08:00
|
|
|
namespace: kube-system
|
2018-02-17 11:37:47 +08:00
|
|
|
data:
|
|
|
|
|
# This etcd-config contains the etcd endpoints of your cluster. If you use
|
|
|
|
|
# TLS please make sure you uncomment the ca-file line and add the respective
|
|
|
|
|
# certificate has a k8s secret, see explanation bellow in the comment labeled
|
|
|
|
|
# "ETCD-CERT"
|
|
|
|
|
etcd-config: |-
|
|
|
|
|
---
|
|
|
|
|
endpoints:
|
|
|
|
|
{% for ip_addr in etcd_access_addresses.split(',') %}
|
|
|
|
|
- {{ ip_addr }}
|
|
|
|
|
{% endfor %}
|
|
|
|
|
#
|
|
|
|
|
# In case you want to use TLS in etcd, uncomment the following line
|
|
|
|
|
# and add the certificate as explained in the comment labeled "ETCD-CERT"
|
|
|
|
|
ca-file: "{{ cilium_cert_dir }}/ca_cert.crt"
|
|
|
|
|
#
|
|
|
|
|
# In case you want client to server authentication, uncomment the following
|
|
|
|
|
# lines and add the certificate and key in cilium-etcd-secrets bellow
|
|
|
|
|
key-file: "{{ cilium_cert_dir }}/key.pem"
|
|
|
|
|
cert-file: "{{ cilium_cert_dir }}/cert.crt"
|
|
|
|
|
|
|
|
|
|
# If you want to run cilium in debug mode change this value to true
|
|
|
|
|
debug: "{{ cilium_debug }}"
|
|
|
|
|
disable-ipv4: "{{ cilium_disable_ipv4 }}"
|
