epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2025-12-14 13:54:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

Add dns configuration for cert manager (#9673)

Browse Source 
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
This commit is contained in:
ERIK
2023-01-24 09:42:15 +08:00
committed by GitHub
parent eb56130433
commit ee2193d4cf
3 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
inventory/sample/group_vars/k8s_cluster/addons.yml
View File

@@ -161,6 +161,12 @@ cert_manager_enabled: false
# -----END CERTIFICATE----- # -----END CERTIFICATE-----
# cert_manager_leader_election_namespace: kube-system # cert_manager_leader_election_namespace: kube-system
# cert_manager_dns_policy: "ClusterFirst"
# cert_manager_dns_config:
# nameservers:
# - "1.1.1.1"
# - "8.8.8.8"
# MetalLB deployment # MetalLB deployment
metallb_enabled: false metallb_enabled: false
metallb_speaker_enabled: "{{ metallb_enabled }}" metallb_speaker_enabled: "{{ metallb_enabled }}"

3
roles/kubernetes-apps/ingress_controller/cert_manager/defaults/main.yml
View File

@@ -4,6 +4,9 @@ cert_manager_user: 1001
cert_manager_tolerations: [] cert_manager_tolerations: []
cert_manager_affinity: {} cert_manager_affinity: {}
cert_manager_nodeselector: {} cert_manager_nodeselector: {}
cert_manager_dns_policy: "ClusterFirst"
cert_manager_dns_config: {}
## Change leader election namespace when deploying on GKE Autopilot that forbid the changes on kube-system namespace. ## Change leader election namespace when deploying on GKE Autopilot that forbid the changes on kube-system namespace.
## See https://github.com/jetstack/cert-manager/issues/3717 ## See https://github.com/jetstack/cert-manager/issues/3717

7
roles/kubernetes-apps/ingress_controller/cert_manager/templates/cert-manager.yml.j2
View File

@@ -976,6 +976,13 @@ spec:
affinity: affinity:
{{ cert_manager_affinity | to_nice_yaml | indent(width=8) }} {{ cert_manager_affinity | to_nice_yaml | indent(width=8) }}
{% endif %} {% endif %}
{% if cert_manager_dns_policy %}
dnsPolicy: {{ cert_manager_dns_policy }}
{% endif %}
{% if cert_manager_dns_config %}
dnsConfig:
{{ cert_manager_dns_config | to_nice_yaml | indent(width=8) }}
{% endif %}
{% if cert_manager_trusted_internal_ca is defined %} {% if cert_manager_trusted_internal_ca is defined %}
volumeMounts: volumeMounts:
- mountPath: /etc/ssl/certs/internal-ca.pem - mountPath: /etc/ssl/certs/internal-ca.pem