|
@ -162,16 +162,17 @@ apiServer: |
|
|
runtime-config: {{ kube_api_runtime_config | join(',') }} |
|
|
runtime-config: {{ kube_api_runtime_config | join(',') }} |
|
|
{% endif %} |
|
|
{% endif %} |
|
|
allow-privileged: "true" |
|
|
allow-privileged: "true" |
|
|
|
|
|
{% if kubernetes_audit or kubernetes_audit_webhook %} |
|
|
|
|
|
audit-policy-file: {{ audit_policy_file }} |
|
|
|
|
|
{% endif %} |
|
|
{% if kubernetes_audit %} |
|
|
{% if kubernetes_audit %} |
|
|
audit-log-path: "{{ audit_log_path }}" |
|
|
audit-log-path: "{{ audit_log_path }}" |
|
|
audit-log-maxage: "{{ audit_log_maxage }}" |
|
|
audit-log-maxage: "{{ audit_log_maxage }}" |
|
|
audit-log-maxbackup: "{{ audit_log_maxbackups }}" |
|
|
audit-log-maxbackup: "{{ audit_log_maxbackups }}" |
|
|
audit-log-maxsize: "{{ audit_log_maxsize }}" |
|
|
audit-log-maxsize: "{{ audit_log_maxsize }}" |
|
|
audit-policy-file: {{ audit_policy_file }} |
|
|
|
|
|
{% endif %} |
|
|
{% endif %} |
|
|
{% if kubernetes_audit_webhook %} |
|
|
{% if kubernetes_audit_webhook %} |
|
|
audit-webhook-config-file: {{ audit_webhook_config_file }} |
|
|
audit-webhook-config-file: {{ audit_webhook_config_file }} |
|
|
audit-policy-file: {{ audit_policy_file }} |
|
|
|
|
|
audit-webhook-mode: {{ audit_webhook_mode }} |
|
|
audit-webhook-mode: {{ audit_webhook_mode }} |
|
|
audit-webhook-batch-max-size: "{{ audit_webhook_batch_max_size }}" |
|
|
audit-webhook-batch-max-size: "{{ audit_webhook_batch_max_size }}" |
|
|
audit-webhook-batch-max-wait: "{{ audit_webhook_batch_max_wait }}" |
|
|
audit-webhook-batch-max-wait: "{{ audit_webhook_batch_max_wait }}" |
|
|