kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add new variable allowing additionnal audit webhook server options (#6726)

pull/6728/head
orange-llajeanne 2020-09-21 15:44:32 +02:00 committed by GitHub
parent 05c9169c70
commit e489e70031
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/kubernetes/master/defaults/main/main.yml
View File

@ -72,6 +72,7 @@ kubernetes_audit_webhook: false
# path to audit webhook config file # path to audit webhook config file
audit_webhook_config_file: "{{ kube_config_dir }}/audit-policy/apiserver-audit-webhook-config.yaml" audit_webhook_config_file: "{{ kube_config_dir }}/audit-policy/apiserver-audit-webhook-config.yaml"
audit_webhook_server_url: "https://audit.app" audit_webhook_server_url: "https://audit.app"
audit_webhook_server_extra_args: {}
audit_webhook_mode: batch audit_webhook_mode: batch
audit_webhook_batch_max_size: 100 audit_webhook_batch_max_size: 100
audit_webhook_batch_max_wait: 1s audit_webhook_batch_max_wait: 1s

3
roles/kubernetes/master/templates/apiserver-audit-webhook-config.yaml.j2
View File

@ -3,6 +3,9 @@ kind: Config
clusters: clusters:
- cluster: - cluster:
server: {{ audit_webhook_server_url }} server: {{ audit_webhook_server_url }}
{% for key in audit_webhook_server_extra_args %}
{{ key }}: "{{ audit_webhook_server_extra_args[key] }}"
{% endfor %}
name: auditsink name: auditsink
contexts: contexts:
- context: - context: