|
|
@ -37,6 +37,7 @@ apiServerExtraArgs: |
|
|
|
admission-control: {{ kube_apiserver_admission_control | join(',') }} |
|
|
|
apiserver-count: "{{ kube_apiserver_count }}" |
|
|
|
service-node-port-range: {{ kube_apiserver_node_port_range }} |
|
|
|
kubelet-preferred-address-types: "{{ kubelet_preferred_address_types }}" |
|
|
|
{% if kube_basic_auth|default(true) %} |
|
|
|
basic-auth-file: {{ kube_users_dir }}/known_users.csv |
|
|
|
{% endif %} |
|
|
@ -52,6 +53,9 @@ apiServerExtraArgs: |
|
|
|
{% if kube_oidc_groups_claim is defined %} |
|
|
|
oidc-groups-claim: {{ kube_oidc_groups_claim }} |
|
|
|
{% endif %} |
|
|
|
{% endif %} |
|
|
|
{% if kube_encrypt_secret_data %} |
|
|
|
experimental-encryption-provider-config: {{ kube_config_dir }}/ssl/secrets_encryption.yaml |
|
|
|
{% endif %} |
|
|
|
storage-backend: {{ kube_apiserver_storage_backend }} |
|
|
|
{% if kube_api_runtime_config is defined %} |
|
|
@ -59,7 +63,7 @@ apiServerExtraArgs: |
|
|
|
{% endif %} |
|
|
|
allow-privileged: "true" |
|
|
|
{% for key in kube_kubeadm_apiserver_extra_args %} |
|
|
|
{{ key }}: {{ kube_kubeadm_apiserver_extra_args[key] }} |
|
|
|
{{ key }}: "{{ kube_kubeadm_apiserver_extra_args[key] }}" |
|
|
|
{% endfor %} |
|
|
|
controllerManagerExtraArgs: |
|
|
|
node-monitor-grace-period: {{ kube_controller_node_monitor_grace_period }} |
|
|
@ -69,12 +73,12 @@ controllerManagerExtraArgs: |
|
|
|
feature-gates: {{ kube_feature_gates|join(',') }} |
|
|
|
{% endif %} |
|
|
|
{% for key in kube_kubeadm_controller_extra_args %} |
|
|
|
{{ key }}: {{ kube_kubeadm_controller_extra_args[key] }} |
|
|
|
{{ key }}: "{{ kube_kubeadm_controller_extra_args[key] }}" |
|
|
|
{% endfor %} |
|
|
|
{% if kube_kubeadm_scheduler_extra_args|length > 0 %} |
|
|
|
schedulerExtraArgs: |
|
|
|
{% for key in kube_kubeadm_scheduler_extra_args %} |
|
|
|
{{ key }}: {{ kube_kubeadm_scheduler_extra_args[key] }} |
|
|
|
{{ key }}: "{{ kube_kubeadm_scheduler_extra_args[key] }}" |
|
|
|
{% endfor %} |
|
|
|
{% endif %} |
|
|
|
apiServerCertSANs: |
|
|
|