486b223e01
This replaces kube-master with kube_control_plane because of [1]:
The Kubernetes project is moving away from wording that is
considered offensive. A new working group WG Naming was created
to track this work, and the word "master" was declared as offensive.
A proposal was formalized for replacing the word "master" with
"control plane". This means it should be removed from source code,
documentation, and user-facing configuration from Kubernetes and
its sub-projects.
NOTE: The reason why this changes it to kube_control_plane not
kube-control-plane is for valid group names on ansible.
[1]: https://github.com/kubernetes/enhancements/blob/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint/README.md#motivation
43 lines
1.4 KiB
Django/Jinja
43 lines
1.4 KiB
Django/Jinja
global
|
|
maxconn 4000
|
|
log 127.0.0.1 local0
|
|
|
|
defaults
|
|
mode http
|
|
log global
|
|
option httplog
|
|
option dontlognull
|
|
option http-server-close
|
|
option redispatch
|
|
retries 5
|
|
timeout http-request 5m
|
|
timeout queue 5m
|
|
timeout connect 30s
|
|
timeout client {{ loadbalancer_apiserver_keepalive_timeout }}
|
|
timeout server 15m
|
|
timeout http-keep-alive 30s
|
|
timeout check 30s
|
|
maxconn 4000
|
|
|
|
{% if loadbalancer_apiserver_healthcheck_port is defined -%}
|
|
frontend healthz
|
|
bind *:{{ loadbalancer_apiserver_healthcheck_port }}
|
|
mode http
|
|
monitor-uri /healthz
|
|
{% endif %}
|
|
|
|
frontend kube_api_frontend
|
|
bind 127.0.0.1:{{ loadbalancer_apiserver_port|default(kube_apiserver_port) }}
|
|
mode tcp
|
|
option tcplog
|
|
default_backend kube_api_backend
|
|
|
|
backend kube_api_backend
|
|
mode tcp
|
|
balance leastconn
|
|
default-server inter 15s downinter 15s rise 2 fall 2 slowstart 60s maxconn 1000 maxqueue 256 weight 100
|
|
option httpchk GET /healthz
|
|
http-check expect status 200
|
|
{% for host in groups['kube_control_plane'] -%}
|
|
server {{ host }} {{ hostvars[host]['access_ip'] | default(hostvars[host]['ip'] | default(fallback_ips[host])) }}:{{ kube_apiserver_port }} check check-ssl verify none
|
|
{% endfor -%}
|