019bcbc893
* Update config.toml.j2
i think this commit code is not completed works
exam registry address : a.com:5000
insecure registry must be http://a.com:5000
but this code add insecure a.com:5000 (without http://)
If there is no http, containerd accesses with https even if insecure_skip_verify = true
solution is code edit
* Update config.toml.j2
* Update containerd.yml
* Update containerd.yml
* Update containerd.yml
* Update config.toml.j2
(cherry picked from commit dda557ed23)
Co-authored-by: Choi Yongbeom <59861163+mircyb@users.noreply.github.com>
80 lines
3.7 KiB
Django/Jinja
80 lines
3.7 KiB
Django/Jinja
version = 2
|
|
root = "{{ containerd_storage_dir }}"
|
|
state = "{{ containerd_state_dir }}"
|
|
oom_score = {{ containerd_oom_score }}
|
|
|
|
[grpc]
|
|
max_recv_message_size = {{ containerd_grpc_max_recv_message_size | default(16777216) }}
|
|
max_send_message_size = {{ containerd_grpc_max_send_message_size | default(16777216) }}
|
|
|
|
[debug]
|
|
level = "{{ containerd_debug_level | default('info') }}"
|
|
|
|
[metrics]
|
|
address = "{{ containerd_metrics_address | default('') }}"
|
|
grpc_histogram = {{ containerd_metrics_grpc_histogram | default(false) | lower }}
|
|
|
|
[plugins]
|
|
[plugins."io.containerd.grpc.v1.cri"]
|
|
sandbox_image = "{{ pod_infra_image_repo }}:{{ pod_infra_image_tag }}"
|
|
max_container_log_line_size = {{ containerd_max_container_log_line_size }}
|
|
[plugins."io.containerd.grpc.v1.cri".containerd]
|
|
default_runtime_name = "{{ containerd_default_runtime | default('runc') }}"
|
|
snapshotter = "{{ containerd_snapshotter | default('overlayfs') }}"
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes]
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.{{ containerd_runc_runtime.name }}]
|
|
runtime_type = "{{ containerd_runc_runtime.type }}"
|
|
runtime_engine = "{{ containerd_runc_runtime.engine}}"
|
|
runtime_root = "{{ containerd_runc_runtime.root }}"
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.{{ containerd_runc_runtime.name }}.options]
|
|
{% for key, value in containerd_runc_runtime.options.items() %}
|
|
{{ key }} = {{ value }}
|
|
{% endfor %}
|
|
{% for runtime in containerd_additional_runtimes %}
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.{{ runtime.name }}]
|
|
runtime_type = "{{ runtime.type }}"
|
|
runtime_engine = "{{ runtime.engine }}"
|
|
runtime_root = "{{ runtime.root }}"
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.{{ runtime.name }}.options]
|
|
{% for key, value in runtime.options.items() %}
|
|
{{ key }} = {{ value }}
|
|
{% endfor %}
|
|
{% endfor %}
|
|
{% if kata_containers_enabled %}
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.kata-qemu]
|
|
runtime_type = "io.containerd.kata-qemu.v2"
|
|
{% endif %}
|
|
{% if gvisor_enabled %}
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc]
|
|
runtime_type = "io.containerd.runsc.v1"
|
|
{% endif %}
|
|
[plugins."io.containerd.grpc.v1.cri".registry]
|
|
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
|
|
{% for registry, addr in containerd_registries.items() %}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."{{ registry }}"]
|
|
endpoint = ["{{ ([ addr ] | flatten ) | join('","') }}"]
|
|
{% endfor %}
|
|
{% if containerd_insecure_registries is defined and containerd_insecure_registries|length>0 %}
|
|
{% for registry, addr in containerd_insecure_registries.items() %}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."{{ registry }}"]
|
|
endpoint = ["{{ ([ addr ] | flatten ) | join('","') }}"]
|
|
[plugins."io.containerd.grpc.v1.cri".registry.configs."{{ registry }}".tls]
|
|
insecure_skip_verify = true
|
|
{% endfor %}
|
|
{% endif %}
|
|
{% for registry in containerd_registry_auth if registry['registry'] is defined %}
|
|
{% if (registry['username'] is defined and registry['password'] is defined) or registry['auth'] is defined %}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.configs."{{ registry['registry'] }}".auth]
|
|
{% if registry['username'] is defined and registry['password'] is defined %}
|
|
password = "{{ registry['password'] }}"
|
|
username = "{{ registry['username'] }}"
|
|
{% else %}
|
|
auth = "{{ registry['auth'] }}"
|
|
{% endif %}
|
|
{% endif %}
|
|
{% endfor %}
|
|
|
|
{% if containerd_extra_args is defined %}
|
|
{{ containerd_extra_args }}
|
|
{% endif %}
|