mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-02-28 09:39:12 +03:00
* feat: add user facing variable with default * feat: remove rolebinding to anonymous users after init and upgrade * feat: use file discovery for secondary control plane nodes * feat: use file discovery for nodes * fix: do not fail if rolebinding does not exist * docs: add warning about kube_api_anonymous_auth * style: improve readability of delegate_to parameter * refactor: rename discovery kubeconfig file * test: enable new variable in hardening and upgrade test cases * docs: add option to config parameters * test: multiple instances and upgrade
38 lines
1.2 KiB
Django/Jinja
38 lines
1.2 KiB
Django/Jinja
apiVersion: kubeadm.k8s.io/v1beta3
|
|
kind: JoinConfiguration
|
|
discovery:
|
|
{% if kubeadm_use_file_discovery %}
|
|
file:
|
|
kubeConfigPath: {{ kube_config_dir }}/cluster-info-discovery-kubeconfig.yaml
|
|
{% else %}
|
|
bootstrapToken:
|
|
{% if kubeadm_config_api_fqdn is defined %}
|
|
apiServerEndpoint: {{ kubeadm_config_api_fqdn }}:{{ loadbalancer_apiserver.port | default(kube_apiserver_port) }}
|
|
{% else %}
|
|
apiServerEndpoint: {{ kubeadm_discovery_address }}
|
|
{% endif %}
|
|
token: {{ kubeadm_token }}
|
|
unsafeSkipCAVerification: true
|
|
{% endif %}
|
|
timeout: {{ discovery_timeout }}
|
|
tlsBootstrapToken: {{ kubeadm_token }}
|
|
controlPlane:
|
|
localAPIEndpoint:
|
|
advertiseAddress: {{ kube_apiserver_address }}
|
|
bindPort: {{ kube_apiserver_port }}
|
|
certificateKey: {{ kubeadm_certificate_key }}
|
|
nodeRegistration:
|
|
name: {{ kube_override_hostname | default(inventory_hostname) }}
|
|
criSocket: {{ cri_socket }}
|
|
{% if inventory_hostname in groups['kube_control_plane'] and inventory_hostname not in groups['kube_node'] %}
|
|
taints:
|
|
- effect: NoSchedule
|
|
key: node-role.kubernetes.io/control-plane
|
|
{% else %}
|
|
taints: []
|
|
{% endif %}
|
|
{% if kubeadm_patches is defined and kubeadm_patches.enabled %}
|
|
patches:
|
|
directory: {{ kubeadm_patches.dest_dir }}
|
|
{% endif %}
|