bd4407199c
The addon-resizer container can reduce resource limits of cpu and memory of metrics-server container in the pod, and that caused OOMKilled. In addition, the original metrics-server manifest doesn't contain the addon-resizer container as [1]. So this adds metrics_server_resizer option to control the addon-resizer container deployment and the default value is false to make it stable for most environments. This is a cherry-pick of8d3961edbe[1]:527679e5e8/manifests/base/deployment.yaml
187 lines
6 KiB
YAML
187 lines
6 KiB
YAML
---
|
|
# Kubernetes dashboard
|
|
# RBAC required. see docs/getting-started.md for access details.
|
|
# dashboard_enabled: false
|
|
|
|
# Helm deployment
|
|
helm_enabled: false
|
|
|
|
# Registry deployment
|
|
registry_enabled: false
|
|
# registry_namespace: kube-system
|
|
# registry_storage_class: ""
|
|
# registry_disk_size: "10Gi"
|
|
|
|
# Metrics Server deployment
|
|
metrics_server_enabled: false
|
|
# metrics_server_resizer: false
|
|
# metrics_server_kubelet_insecure_tls: true
|
|
# metrics_server_metric_resolution: 15s
|
|
# metrics_server_kubelet_preferred_address_types: "InternalIP"
|
|
|
|
# Rancher Local Path Provisioner
|
|
local_path_provisioner_enabled: false
|
|
# local_path_provisioner_namespace: "local-path-storage"
|
|
# local_path_provisioner_storage_class: "local-path"
|
|
# local_path_provisioner_reclaim_policy: Delete
|
|
# local_path_provisioner_claim_root: /opt/local-path-provisioner/
|
|
# local_path_provisioner_debug: false
|
|
# local_path_provisioner_image_repo: "rancher/local-path-provisioner"
|
|
# local_path_provisioner_image_tag: "v0.0.19"
|
|
# local_path_provisioner_helper_image_repo: "busybox"
|
|
# local_path_provisioner_helper_image_tag: "latest"
|
|
|
|
# Local volume provisioner deployment
|
|
local_volume_provisioner_enabled: false
|
|
# local_volume_provisioner_namespace: kube-system
|
|
# local_volume_provisioner_nodelabels:
|
|
# - kubernetes.io/hostname
|
|
# - topology.kubernetes.io/region
|
|
# - topology.kubernetes.io/zone
|
|
# local_volume_provisioner_storage_classes:
|
|
# local-storage:
|
|
# host_dir: /mnt/disks
|
|
# mount_dir: /mnt/disks
|
|
# volume_mode: Filesystem
|
|
# fs_type: ext4
|
|
# fast-disks:
|
|
# host_dir: /mnt/fast-disks
|
|
# mount_dir: /mnt/fast-disks
|
|
# block_cleaner_command:
|
|
# - "/scripts/shred.sh"
|
|
# - "2"
|
|
# volume_mode: Filesystem
|
|
# fs_type: ext4
|
|
|
|
# CSI Volume Snapshot Controller deployment, set this to true if your CSI is able to manage snapshots
|
|
# currently, setting cinder_csi_enabled=true would automatically enable the snapshot controller
|
|
# Longhorn is an extenal CSI that would also require setting this to true but it is not included in kubespray
|
|
# csi_snapshot_controller_enabled: false
|
|
|
|
# CephFS provisioner deployment
|
|
cephfs_provisioner_enabled: false
|
|
# cephfs_provisioner_namespace: "cephfs-provisioner"
|
|
# cephfs_provisioner_cluster: ceph
|
|
# cephfs_provisioner_monitors: "172.24.0.1:6789,172.24.0.2:6789,172.24.0.3:6789"
|
|
# cephfs_provisioner_admin_id: admin
|
|
# cephfs_provisioner_secret: secret
|
|
# cephfs_provisioner_storage_class: cephfs
|
|
# cephfs_provisioner_reclaim_policy: Delete
|
|
# cephfs_provisioner_claim_root: /volumes
|
|
# cephfs_provisioner_deterministic_names: true
|
|
|
|
# RBD provisioner deployment
|
|
rbd_provisioner_enabled: false
|
|
# rbd_provisioner_namespace: rbd-provisioner
|
|
# rbd_provisioner_replicas: 2
|
|
# rbd_provisioner_monitors: "172.24.0.1:6789,172.24.0.2:6789,172.24.0.3:6789"
|
|
# rbd_provisioner_pool: kube
|
|
# rbd_provisioner_admin_id: admin
|
|
# rbd_provisioner_secret_name: ceph-secret-admin
|
|
# rbd_provisioner_secret: ceph-key-admin
|
|
# rbd_provisioner_user_id: kube
|
|
# rbd_provisioner_user_secret_name: ceph-secret-user
|
|
# rbd_provisioner_user_secret: ceph-key-user
|
|
# rbd_provisioner_user_secret_namespace: rbd-provisioner
|
|
# rbd_provisioner_fs_type: ext4
|
|
# rbd_provisioner_image_format: "2"
|
|
# rbd_provisioner_image_features: layering
|
|
# rbd_provisioner_storage_class: rbd
|
|
# rbd_provisioner_reclaim_policy: Delete
|
|
|
|
# Nginx ingress controller deployment
|
|
ingress_nginx_enabled: false
|
|
# ingress_nginx_host_network: false
|
|
ingress_publish_status_address: ""
|
|
# ingress_nginx_nodeselector:
|
|
# kubernetes.io/os: "linux"
|
|
# ingress_nginx_tolerations:
|
|
# - key: "node-role.kubernetes.io/master"
|
|
# operator: "Equal"
|
|
# value: ""
|
|
# effect: "NoSchedule"
|
|
# - key: "node-role.kubernetes.io/control-plane"
|
|
# operator: "Equal"
|
|
# value: ""
|
|
# effect: "NoSchedule"
|
|
# ingress_nginx_namespace: "ingress-nginx"
|
|
# ingress_nginx_insecure_port: 80
|
|
# ingress_nginx_secure_port: 443
|
|
# ingress_nginx_configmap:
|
|
# map-hash-bucket-size: "128"
|
|
# ssl-protocols: "TLSv1.2 TLSv1.3"
|
|
# ingress_nginx_configmap_tcp_services:
|
|
# 9000: "default/example-go:8080"
|
|
# ingress_nginx_configmap_udp_services:
|
|
# 53: "kube-system/coredns:53"
|
|
# ingress_nginx_extra_args:
|
|
# - --default-ssl-certificate=default/foo-tls
|
|
# ingress_nginx_class: nginx
|
|
|
|
# ambassador ingress controller deployment
|
|
ingress_ambassador_enabled: false
|
|
# ingress_ambassador_namespace: "ambassador"
|
|
# ingress_ambassador_version: "*"
|
|
# ingress_ambassador_multi_namespaces: false
|
|
|
|
# ALB ingress controller deployment
|
|
ingress_alb_enabled: false
|
|
# alb_ingress_aws_region: "us-east-1"
|
|
# alb_ingress_restrict_scheme: "false"
|
|
# Enables logging on all outbound requests sent to the AWS API.
|
|
# If logging is desired, set to true.
|
|
# alb_ingress_aws_debug: "false"
|
|
|
|
# Cert manager deployment
|
|
cert_manager_enabled: false
|
|
# cert_manager_namespace: "cert-manager"
|
|
|
|
# MetalLB deployment
|
|
metallb_enabled: false
|
|
metallb_speaker_enabled: true
|
|
# metallb_ip_range:
|
|
# - "10.5.0.50-10.5.0.99"
|
|
# metallb_speaker_nodeselector:
|
|
# kubernetes.io/os: "linux"
|
|
# metallb_controller_nodeselector:
|
|
# kubernetes.io/os: "linux"
|
|
# metallb_speaker_tolerations:
|
|
# - key: "node-role.kubernetes.io/master"
|
|
# operator: "Equal"
|
|
# value: ""
|
|
# effect: "NoSchedule"
|
|
# - key: "node-role.kubernetes.io/control-plane"
|
|
# operator: "Equal"
|
|
# value: ""
|
|
# effect: "NoSchedule"
|
|
# metallb_controller_tolerations:
|
|
# - key: "node-role.kubernetes.io/master"
|
|
# operator: "Equal"
|
|
# value: ""
|
|
# effect: "NoSchedule"
|
|
# - key: "node-role.kubernetes.io/control-plane"
|
|
# operator: "Equal"
|
|
# value: ""
|
|
# effect: "NoSchedule"
|
|
# metallb_version: v0.10.2
|
|
# metallb_protocol: "layer2"
|
|
# metallb_port: "7472"
|
|
# metallb_memberlist_port: "7946"
|
|
# metallb_additional_address_pools:
|
|
# kube_service_pool:
|
|
# ip_range:
|
|
# - "10.5.1.50-10.5.1.99"
|
|
# protocol: "layer2"
|
|
# auto_assign: false
|
|
# metallb_protocol: "bgp"
|
|
# metallb_peers:
|
|
# - peer_address: 192.0.2.1
|
|
# peer_asn: 64512
|
|
# my_asn: 4200000000
|
|
# - peer_address: 192.0.2.2
|
|
# peer_asn: 64513
|
|
# my_asn: 4200000000
|
|
|
|
# The plugin manager for kubectl
|
|
krew_enabled: false
|
|
krew_root_dir: "/usr/local/krew"
|