Skip to content

Commit

Permalink
Added customize K8s control plane configuration
Browse files Browse the repository at this point in the history
Closes: #594

Change-Id: Ie90c58a34c47ad517537f8b6492ff838b1f547fc
  • Loading branch information
pallavgupta committed Jul 7, 2021
1 parent 8a15d04 commit ee9747d
Showing 1 changed file with 32 additions and 1 deletion.
33 changes: 32 additions & 1 deletion manifests/function/k8scontrol/controlplane.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -11,9 +11,40 @@ spec:
name: cluster-controlplane
kubeadmConfigSpec:
clusterConfiguration:
imageRepository: k8s.gcr.io
apiServer:
timeoutForControlPlane: 1000s
imageRepository: k8s.gcr.io
extraArgs:
allow-privileged: "true"
kubelet-preferred-address-types: InternalIP,ExternalIP,Hostname
authorization-mode: Node,RBAC
service-cluster-ip-range: 10.0.0.0/20
service-node-port-range: 80-32767
enable-admission-plugins: NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,ResourceQuota,DefaultTolerationSeconds,NodeRestriction
feature-gates: PodShareProcessNamespace=true
tls-cipher-suites: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA
tls-min-version: VersionTLS12
v: "2"
requestheader-group-headers: X-Remote-Group
requestheader-username-headers: X-Remote-User
requestheader-allowed-names: front-proxy-client
controllerManager:
extraArgs:
cluster-cidr: 192.168.16.0/20
node-monitor-period: 5s
node-monitor-grace-period: 20s
pod-eviction-timeout: 60s
terminated-pod-gc-threshold: "1000"
bind-address: 127.0.0.1
port: "0"
use-service-account-credentials: "true"
configure-cloud-routes: "false"
enable-hostpath-provisioner: "true"
v: "2"
networking:
dnsDomain: cluster.local
podSubnet: 192.168.16.0/20
serviceSubnet: 10.0.0.0/20
files:
- path: "/etc/systemd/system/containerd.service.d/http-proxy.conf"
content: |
Expand Down

0 comments on commit ee9747d

Please sign in to comment.