2017-08-24 17:09:52 +08:00
|
|
|
---
|
2017-05-12 22:32:37 +08:00
|
|
|
# Valid options: docker (default), rkt, or host
|
2017-08-21 15:53:49 +08:00
|
|
|
kubelet_deployment_type: host
|
2017-05-12 22:32:37 +08:00
|
|
|
|
2016-10-24 21:11:52 +08:00
|
|
|
# change to 0.0.0.0 to enable insecure access from anywhere (not recommended)
|
|
|
|
|
kube_apiserver_insecure_bind_address: 127.0.0.1
|
|
|
|
|
|
2016-07-20 16:57:47 +08:00
|
|
|
# resolv.conf to base dns config
|
|
|
|
|
kube_resolv_conf: "/etc/resolv.conf"
|
|
|
|
|
|
2016-07-12 16:20:43 +08:00
|
|
|
kube_proxy_mode: iptables
|
2015-11-27 19:32:31 +08:00
|
|
|
|
2017-02-10 18:16:19 +08:00
|
|
|
# If using the pure iptables proxy, SNAT everything. Note that it breaks any
|
|
|
|
|
# policy engine.
|
|
|
|
|
kube_proxy_masquerade_all: false
|
2016-10-03 18:08:41 +08:00
|
|
|
|
2017-04-05 18:47:03 +08:00
|
|
|
# These options reflect limitations of running kubelet in a container.
|
|
|
|
|
# Modify at your own risk
|
2017-08-21 15:53:49 +08:00
|
|
|
kubelet_enable_cri: true
|
|
|
|
|
kubelet_cgroups_per_qos: true
|
2017-04-05 18:47:03 +08:00
|
|
|
# Set to empty to avoid cgroup creation
|
2017-07-19 22:57:36 +08:00
|
|
|
kubelet_enforce_node_allocatable: "\"\""
|
2017-04-05 18:47:03 +08:00
|
|
|
|
|
|
|
|
|
2016-12-23 22:44:44 +08:00
|
|
|
# Limits for kube components and nginx load balancer app
|
|
|
|
|
kubelet_memory_limit: 512M
|
|
|
|
|
kubelet_cpu_limit: 100m
|
2017-02-07 22:01:02 +08:00
|
|
|
kubelet_status_update_frequency: 10s
|
2016-12-23 22:44:44 +08:00
|
|
|
kube_proxy_memory_limit: 2000M
|
|
|
|
|
kube_proxy_cpu_limit: 500m
|
2017-02-28 00:53:43 +08:00
|
|
|
kube_proxy_memory_requests: 64M
|
2016-12-23 22:44:44 +08:00
|
|
|
kube_proxy_cpu_requests: 150m
|
|
|
|
|
nginx_memory_limit: 512M
|
|
|
|
|
nginx_cpu_limit: 300m
|
2017-02-28 00:53:43 +08:00
|
|
|
nginx_memory_requests: 32M
|
2017-03-23 17:11:30 +08:00
|
|
|
nginx_cpu_requests: 25m
|
2016-12-23 22:44:44 +08:00
|
|
|
|
2016-03-17 17:22:52 +08:00
|
|
|
# kube_api_runtime_config:
|
|
|
|
|
# - extensions/v1beta1/daemonsets=true
|
|
|
|
|
# - extensions/v1beta1/deployments=true
|
2016-09-28 19:05:08 +08:00
|
|
|
|
|
|
|
|
nginx_image_repo: nginx
|
|
|
|
|
nginx_image_tag: 1.11.4-alpine
|
2017-01-10 12:54:01 +08:00
|
|
|
|
|
|
|
|
etcd_config_dir: /etc/ssl/etcd
|
2017-02-03 23:26:30 +08:00
|
|
|
|
|
|
|
|
# A port range to reserve for services with NodePort visibility.
|
|
|
|
|
# Inclusive at both ends of the range.
|
|
|
|
|
kube_apiserver_node_port_range: "30000-32767"
|
2017-02-10 00:25:44 +08:00
|
|
|
|
|
|
|
|
kubelet_load_modules: false
|
2017-04-15 05:33:04 +08:00
|
|
|
|
2017-08-24 17:09:52 +08:00
|
|
|
## Support custom flags to be passed to kubelet
|
2017-05-12 22:32:37 +08:00
|
|
|
kubelet_custom_flags: []
|
2017-06-08 05:09:36 +08:00
|
|
|
|
|
|
|
|
# This setting is used for rkt based kubelet for deploying hyperkube
|
|
|
|
|
# from a docker based registry ( controls --insecure and docker:// )
|
|
|
|
|
## Empty vaule for quay.io containers
|
|
|
|
|
## docker for docker registry containers
|
|
|
|
|
kube_hyperkube_image_repo: ""
|
2017-07-13 22:04:39 +08:00
|
|
|
|
|
|
|
|
# If non-empty, will use this string as identification instead of the actual hostname
|
|
|
|
|
kube_override_hostname: "{{ ansible_hostname }}"
|
