Files
kubespray/tests/files/packet_ubuntu24-calico-etcd-datastore.yml
Max Gautier 68718dcb6f Stricter kubeadm validation (config and runtime checks) (#11710)
* kubeadm: do not ignore preflight errors blindly

The "ignoring all errors" seems to date back to the inception of the
kubeadm support (it was --skip-preflight-check before).

This can mask real errors and prevent users from seeing them.

Do not ignore any errors by default and make the set of ignored errors
configurable.

* download/kubeadm: remove redundant task

The mode is already set by the previous `copy` task.

* Validate kubeadm configs

This should help to fail early when we have invalid kubeadm configs (from
a kubespray bug or a misconfiguration).

* kubeadm-upgrade: remove unnecessary bool cast

* Convert kubeadm join discovery timeout to v1beta4 config

* CI: Ignore kubeadm:Mem errors on some setup.
2024-11-15 06:34:52 +00:00

49 lines
1.2 KiB
YAML

---
# Instance settings
cloud_image: ubuntu-2404
mode: node-etcd-client
vm_memory: 1600
# Kubespray settings
auto_renew_certificates: true
kubeadm_ignore_preflight_errors:
- Mem
# Currently ipvs not available on KVM: https://packages.ubuntu.com/search?suite=noble&arch=amd64&mode=exactfilename&searchon=contents&keywords=ip_vs_sh.ko
kube_proxy_mode: iptables
enable_nodelocaldns: false
containerd_registries:
"docker.io": "https://mirror.gcr.io"
containerd_registries_mirrors:
- prefix: docker.io
mirrors:
- host: https://mirror.gcr.io
capabilities: ["pull", "resolve"]
skip_verify: false
- prefix: 172.19.16.11:5000
mirrors:
- host: http://172.19.16.11:5000
capabilities: ["pull", "resolve", "push"]
skip_verify: true
calico_datastore: "etcd"
# Test kubeadm patches
kubeadm_patches:
- target: kube-apiserver
patch:
metadata:
annotations:
example.com/test: "true"
labels:
example.com/prod_level: "prep"
- target: kube-controller-manager
patch:
metadata:
annotations:
example.com/test: "false"
labels:
example.com/prod_level: "prep"