|
@ -7,32 +7,25 @@ crio_log_level: "info" |
|
|
crio_metrics_port: "9090" |
|
|
crio_metrics_port: "9090" |
|
|
crio_pause_image: "{{ pod_infra_image_repo }}:{{ pod_infra_version }}" |
|
|
crio_pause_image: "{{ pod_infra_image_repo }}:{{ pod_infra_version }}" |
|
|
|
|
|
|
|
|
# Trusted registries to pull unqualified images (e.g. alpine:latest) from |
|
|
|
|
|
|
|
|
# Registries defined within cri-o. |
|
|
# By default unqualified images are not allowed for security reasons |
|
|
# By default unqualified images are not allowed for security reasons |
|
|
crio_registries: [] |
|
|
crio_registries: [] |
|
|
|
|
|
|
|
|
# Configure insecure registries. |
|
|
|
|
|
crio_insecure_registries: [] |
|
|
|
|
|
|
|
|
|
|
|
# Configure registry auth (if applicable to secure/insecure registries) |
|
|
|
|
|
crio_registry_auth: [] |
|
|
|
|
|
# - registry: 10.0.0.2:5000 |
|
|
|
|
|
# username: user |
|
|
|
|
|
# password: pass |
|
|
|
|
|
|
|
|
|
|
|
# Define registiries mirror |
|
|
|
|
|
|
|
|
|
|
|
crio_registries_mirrors: [] |
|
|
|
|
|
# - prefix: docker.io |
|
|
# - prefix: docker.io |
|
|
# insecure: false |
|
|
# insecure: false |
|
|
# blocked: false |
|
|
# blocked: false |
|
|
# location: registry-1.docker.io |
|
|
|
|
|
|
|
|
# location: registry-1.docker.io ## REQUIRED |
|
|
|
|
|
# unqualified: false |
|
|
# mirrors: |
|
|
# mirrors: |
|
|
# - location: 172.20.100.52:5000 |
|
|
# - location: 172.20.100.52:5000 |
|
|
# insecure: true |
|
|
# insecure: true |
|
|
# - location: mirror.gcr.io |
|
|
# - location: mirror.gcr.io |
|
|
# insecure: false |
|
|
# insecure: false |
|
|
|
|
|
|
|
|
|
|
|
crio_registry_auth: [] |
|
|
|
|
|
# - registry: 10.0.0.2:5000 |
|
|
|
|
|
# username: user |
|
|
|
|
|
# password: pass |
|
|
|
|
|
|
|
|
crio_seccomp_profile: "" |
|
|
crio_seccomp_profile: "" |
|
|
crio_selinux: "{{ (preinstall_selinux_state == 'enforcing')|lower }}" |
|
|
crio_selinux: "{{ (preinstall_selinux_state == 'enforcing')|lower }}" |
|
|
crio_signature_policy: "{% if ansible_os_family == 'ClearLinux' %}/usr/share/defaults/crio/policy.json{% endif %}" |
|
|
crio_signature_policy: "{% if ansible_os_family == 'ClearLinux' %}/usr/share/defaults/crio/policy.json{% endif %}" |
|
|