2016-08-25 09:16:14 +00:00
|
|
|
# An experimental dev/test only dynamic volumes provisioner,
|
|
|
|
|
# for PetSets. Works for kube>=v1.3 only.
|
|
|
|
|
kube_hostpath_dynamic_provisioner: "false"
|
2016-10-24 13:11:52 +00:00
|
|
|
|
|
|
|
|
# change to 0.0.0.0 to enable insecure access from anywhere (not recommended)
|
|
|
|
|
kube_apiserver_insecure_bind_address: 127.0.0.1
|
|
|
|
|
|
2016-11-18 12:56:55 +00:00
|
|
|
# A port range to reserve for services with NodePort visibility.
|
|
|
|
|
# Inclusive at both ends of the range.
|
|
|
|
|
kube_apiserver_node_port_range: "30000-32767"
|
|
|
|
|
|
2016-11-09 10:44:41 +00:00
|
|
|
# ETCD cert dir for connecting apiserver to etcd
|
|
|
|
|
etcd_config_dir: /etc/ssl/etcd
|
|
|
|
|
etcd_cert_dir: "{{ etcd_config_dir }}/ssl"
|
|
|
|
|
|
2016-12-28 13:58:37 +00:00
|
|
|
# Linux capabilities to be dropped for k8s apps ran by container engines
|
|
|
|
|
apps_drop_cap:
|
|
|
|
|
- chown
|
|
|
|
|
- dac_override
|
|
|
|
|
- fowner
|
|
|
|
|
- fsetid
|
|
|
|
|
- kill
|
|
|
|
|
- setgid
|
|
|
|
|
- setuid
|
|
|
|
|
- setpcap
|
|
|
|
|
- sys_chroot
|
|
|
|
|
- mknod
|
|
|
|
|
- audit_write
|
|
|
|
|
- setfcap
|
|
|
|
|
|
2016-12-23 14:44:44 +00:00
|
|
|
# Limits for kube components
|
|
|
|
|
kube_controller_memory_limit: 512M
|
|
|
|
|
kube_controller_cpu_limit: 250m
|
|
|
|
|
kube_controller_memory_requests: 170M
|
|
|
|
|
kube_controller_cpu_requests: 100m
|
|
|
|
|
kube_scheduler_memory_limit: 512M
|
|
|
|
|
kube_scheduler_cpu_limit: 250m
|
|
|
|
|
kube_scheduler_memory_requests: 170M
|
|
|
|
|
kube_scheduler_cpu_requests: 100m
|
|
|
|
|
kube_apiserver_memory_limit: 2000M
|
|
|
|
|
kube_apiserver_cpu_limit: 800m
|
|
|
|
|
kube_apiserver_memory_requests: 256M
|
|
|
|
|
kube_apiserver_cpu_requests: 300m
|
