73066f308d
Also adds all masters by hostname and localhost/127.0.0.1 to apiserver SSL certificate. Includes documentation update on how localhost loadbalancer works.
26 lines
643 B
Django/Jinja
26 lines
643 B
Django/Jinja
error_log stderr notice;
|
|
|
|
worker_processes auto;
|
|
events {
|
|
multi_accept on;
|
|
use epoll;
|
|
worker_connections 1024;
|
|
}
|
|
|
|
stream {
|
|
upstream kube_apiserver {
|
|
least_conn;
|
|
{% for host in groups['kube-master'] -%}
|
|
server {{ hostvars[host]['access_ip'] | default(hostvars[host]['ip'] | default(hostvars[host]['ansible_default_ipv4']['address'])) }}:{{ kube_apiserver_port }};
|
|
{% endfor %}
|
|
}
|
|
|
|
server {
|
|
listen {{ kube_apiserver_port }};
|
|
proxy_pass kube_apiserver;
|
|
proxy_timeout 3s;
|
|
proxy_connect_timeout 1s;
|
|
|
|
}
|
|
|
|
}
|