C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Added kube_apiserver_nginx_bind_address for node

Browse source
This commit is contained in:
peay 2017-01-07 14:04:00 -05:00
parent aa33613b98
commit f4ba0e768b
2 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
roles/kubernetes/node/defaults/main.yml
View file

@ -1,6 +1,9 @@
# change to 0.0.0.0 to enable insecure access from anywhere (not recommended) # change to 0.0.0.0 to enable insecure access from anywhere (not recommended)
kube_apiserver_insecure_bind_address: 127.0.0.1 kube_apiserver_insecure_bind_address: 127.0.0.1
# change to 0.0.0.0 to enable insecure access from anywhere on this node (not recommended)
kube_apiserver_nginx_bind_address: 127.0.0.1
# resolv.conf to base dns config # resolv.conf to base dns config
kube_resolv_conf: "/etc/resolv.conf" kube_resolv_conf: "/etc/resolv.conf"

2
roles/kubernetes/node/templates/nginx.conf.j2
View file

@ -16,7 +16,7 @@ stream {
} }
server { server {
listen {{ kube_apiserver_port }}; listen {{ kube_apiserver_nginx_bind_address }}:{{ kube_apiserver_port }};
proxy_pass kube_apiserver; proxy_pass kube_apiserver;
proxy_timeout 10m; proxy_timeout 10m;
proxy_connect_timeout 1s; proxy_connect_timeout 1s;