epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-08 02:58:29 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2019 from chadswen/disable-api-insecure-port

Browse Source 
Support for disabling apiserver insecure port (the sequel)
This commit is contained in:
Brad Beam
2018-01-24 19:58:53 -06:00
committed by GitHub
parent 98eb845f8c b8788421d5
commit 0c8bed21ee
8 changed files with 44 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
roles/kubespray-defaults/defaults/main.yaml
View File

@@ -229,6 +229,18 @@ kube_apiserver_endpoint: |-
{%- endif %}
kube_apiserver_insecure_endpoint: >-
http://{{ kube_apiserver_insecure_bind_address | regex_replace('0\.0\.0\.0','127.0.0.1') }}:{{ kube_apiserver_insecure_port }}
kube_apiserver_client_cert: |-
{% if kubeadm_enabled -%}
{{ kube_cert_dir }}/ca.crt
{%- else -%}
{{ kube_cert_dir }}/apiserver.pem
{%- endif %}
kube_apiserver_client_key: |-
{% if kubeadm_enabled -%}
{{ kube_cert_dir }}/ca.key
{%- else -%}
{{ kube_cert_dir }}/apiserver-key.pem
{%- endif %}
# Vars for pointing to etcd endpoints
is_etcd_master: "{{ inventory_hostname in groups['etcd'] }}"