439 lines
22 KiB
YAML
439 lines
22 KiB
YAML
|
{{- $clustername := .Values.cluster.name -}}
|
||
|
|
apiVersion: provisioning.cattle.io/v1
|
||
|
|
kind: Cluster
|
||
|
|
metadata:
|
||
|
|
{{- if .Values.cluster.labels }}
|
||
|
|
labels:
|
||
|
|
{{ toYaml .Values.cluster.labels | indent 4 }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.annotations }}
|
||
|
|
annotations:
|
||
|
|
{{ toYaml .Values.cluster.annotations | indent 4 }}
|
||
|
|
{{- end }}
|
||
|
|
name: {{ .Values.cluster.name }}
|
||
|
|
namespace: fleet-default
|
||
|
|
spec:
|
||
|
|
{{- if .Values.cluster.config.agentEnvVars }}
|
||
|
|
agentEnvVars:
|
||
|
|
{{ toYaml .Values.cluster.config.agentEnvVars | indent 4 }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cloudCredentialSecretName }}
|
||
|
|
cloudCredentialSecretName: cattle-global-data:{{ .Values.cloudCredentialSecretName }}
|
||
|
|
{{- end }}
|
||
|
|
# clusterAPIConfig:
|
||
|
|
# clusterAgentDeploymentCustomization:
|
||
|
|
{{- if .Values.cluster.config.defaultClusterRoleForProjectMembers }}
|
||
|
|
defaultClusterRoleForProjectMembers: {{ .Values.cluster.config.defaultClusterRoleForProjectMembers }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.defaultPodSecurityAdmissionConfigurationTemplateName }}
|
||
|
|
defaultPodSecurityAdmissionConfigurationTemplateName: {{ .Values.cluster.config.defaultPodSecurityAdmissionConfigurationTemplateName }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.defaultPodSecurityPolicyTemplateName }}
|
||
|
|
defaultPodSecurityPolicyTemplateName: {{ .Values.cluster.config.defaultPodSecurityPolicyTemplateName }}
|
||
|
|
{{- end }}
|
||
|
|
enableNetworkPolicy: {{ .Values.cluster.config.enableNetworkPolicy }}
|
||
|
|
# fleetAgentDeploymentCustomization:
|
||
|
|
{{- if .Values.cluster.config.kubernetesVersion }}
|
||
|
|
kubernetesVersion: {{ .Values.cluster.config.kubernetesVersion }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if eq .Values.cluster.config.localClusterAuthEndpoint.enabled true }}
|
||
|
|
localClusterAuthEndpoint:
|
||
|
|
enabled: {{ .Values.cluster.config.localClusterAuthEndpoint.enabled }}
|
||
|
|
fqdn: {{ .Values.cluster.config.localClusterAuthEndpoint.fqdn }}
|
||
|
|
caCerts: {{ .Values.cluster.config.localClusterAuthEndpoint.caCerts }}
|
||
|
|
{{- else }}
|
||
|
|
localClusterAuthEndpoint:
|
||
|
|
enabled: false
|
||
|
|
{{- end }}
|
||
|
|
# redeploySystemAgentGeneration:
|
||
|
|
rkeConfig:
|
||
|
|
{{- with $.Values.cluster.config.chartValues }}
|
||
|
|
chartValues:
|
||
|
|
{{- toYaml . | nindent 6 }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with $.Values.cluster.config.additionalManifests }}
|
||
|
|
additionalManifest:
|
||
|
|
{{- toYaml . | nindent 6 }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.etcd }}
|
||
|
|
etcd:
|
||
|
|
disableSnapshots: {{ .Values.cluster.config.etcd.disableSnapshots }}
|
||
|
|
snapshotRetention: {{ .Values.cluster.config.etcd.snapshotRetention }}
|
||
|
|
snapshotScheduleCron: {{ .Values.cluster.config.etcd.snapshotScheduleCron }}
|
||
|
|
{{- if .Values.cluster.config.etcd.s3 }}
|
||
|
|
s3:
|
||
|
|
bucket: {{ .Values.cluster.config.etcd.s3.bucket }}
|
||
|
|
cloudCredentialName: cattle-global-data:{{ .Values.cluster.config.etcd.s3.cloudCredentialSecretName }}
|
||
|
|
{{- if .Values.cluster.config.etcd.s3.folder }}
|
||
|
|
folder: {{ .Values.cluster.config.etcd.s3.folder }}
|
||
|
|
{{- end }}
|
||
|
|
region: {{ .Values.cluster.config.etcd.s3.region }}
|
||
|
|
skipSSLVerify: {{ .Values.cluster.config.etcd.s3.skipSSLVerify }}
|
||
|
|
endpoint: {{ .Values.cluster.config.etcd.s3.endpoint }}
|
||
|
|
{{- if .Values.cluster.config.etcd.s3.endpointCA }}
|
||
|
|
endpointCA: |-
|
||
|
|
{{ .Values.cluster.config.etcd.s3.endpointCA | indent 10 }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
# etcdSnapshotCreate:
|
||
|
|
# etcdSnapshotRestore:
|
||
|
|
# infrastructureRef:
|
||
|
|
{{- if .Values.cluster.config.globalConfig }}
|
||
|
|
machineGlobalConfig:
|
||
|
|
{{- if .Values.cluster.config.globalConfig.cni }}
|
||
|
|
cni: {{ .Values.cluster.config.globalConfig.cni }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.cluster_cidr }}
|
||
|
|
cluster-cidr: {{ .Values.cluster.config.globalConfig.cluster_cidr }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.service_cidr }}
|
||
|
|
service-cidr: {{ .Values.cluster.config.globalConfig.service_cidr }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.docker }}
|
||
|
|
docker: {{ .Values.cluster.config.globalConfig.docker }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.disable }}
|
||
|
|
disable: {{ .Values.cluster.config.globalConfig.disable | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.disable_scheduler }}
|
||
|
|
disable-scheduler: {{ .Values.cluster.config.globalConfig.disable_scheduler }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.disable_cloud_controller }}
|
||
|
|
disable-cloud-controller: {{ .Values.cluster.config.globalConfig.disable_cloud_controller }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.disable_kube_proxy }}
|
||
|
|
disable-kube-proxy: {{ .Values.cluster.config.globalConfig.disable_kube_proxy }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.etcd_expose_metrics }}
|
||
|
|
etcd-expose-metrics: {{ .Values.cluster.config.globalConfig.etcd_expose_metrics }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.profile }}
|
||
|
|
profile: {{ .Values.cluster.config.globalConfig.profile }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.selinux }}
|
||
|
|
selinux: {{ .Values.cluster.config.globalConfig.selinux }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.tls_san }}
|
||
|
|
tls-san: {{ .Values.cluster.config.globalConfig.tls_san | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.token }}
|
||
|
|
token: {{ .Values.cluster.config.globalConfig.token }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.systemDefaultRegistry }}
|
||
|
|
system-default-registry: {{ .Values.cluster.config.globalConfig.systemDefaultRegistry }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.secrets_encryption }}
|
||
|
|
secrets-encryption: {{ .Values.cluster.config.globalConfig.secrets_encryption }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.write_kubeconfig_mode }}
|
||
|
|
write-kubeconfig-mode: {{ .Values.cluster.config.globalConfig.write_kubeconfig_mode }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.use_service_account_credentials }}
|
||
|
|
use-service-account-credentials: {{ .Values.cluster.config.globalConfig.use_service_account_credentials }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.protect_kernel_defaults }}
|
||
|
|
protect-kernel-defaults: {{ .Values.cluster.config.globalConfig.protect_kernel_defaults }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.cloud_provider_name }}
|
||
|
|
cloud-provider-name: {{ .Values.cluster.config.globalConfig.cloud_provider_name }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.cloud_provider_config }}
|
||
|
|
cloud-provider-config: {{ .Values.cluster.config.globalConfig.cloud_provider_config }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.kube_controller_manager_arg }}
|
||
|
|
kube-controller-manager-arg: {{ .Values.cluster.config.globalConfig.kube_controller_manager_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.kube_scheduler_arg }}
|
||
|
|
kube-scheduler-arg: {{ .Values.cluster.config.globalConfig.kube_scheduler_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.kube_apiserver_arg }}
|
||
|
|
kube-apiserver-arg: {{ .Values.cluster.config.globalConfig.kube_apiserver_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.kubelet_proxy_arg }}
|
||
|
|
kubelet-proxy-arg: {{ .Values.cluster.config.globalConfig.kubelet_proxy_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.kubelet_arg }}
|
||
|
|
kubelet-arg: {{ .Values.cluster.config.globalConfig.kubelet_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
# machinePoolDefaults:
|
||
|
|
{{- if ne .Values.cloudprovider "custom" }}
|
||
|
|
machinePools:
|
||
|
|
{{- if .Values.nodepools }} {{ range $index, $nodepool := .Values.nodepools }}
|
||
|
|
- name: {{ $nodepool.name }}
|
||
|
|
quantity: {{ $nodepool.quantity }}
|
||
|
|
controlPlaneRole: {{ $nodepool.controlplane }}
|
||
|
|
etcdRole: {{ $nodepool.etcd }}
|
||
|
|
workerRole: {{ $nodepool.worker }}
|
||
|
|
{{- if $nodepool.labels }}
|
||
|
|
labels:
|
||
|
|
{{ toYaml $nodepool.labels | indent 8 }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if $nodepool.taints }}
|
||
|
|
taints:
|
||
|
|
{{ toYaml $nodepool.taints | indent 8 }}
|
||
|
|
{{- end }}
|
||
|
|
machineConfigRef:
|
||
|
|
{{- if eq $.Values.cloudprovider "amazonec2" }}
|
||
|
|
kind: Amazonec2Config
|
||
|
|
{{- else if eq $.Values.cloudprovider "vsphere" }}
|
||
|
|
kind: VmwarevsphereConfig
|
||
|
|
{{- else if eq $.Values.cloudprovider "harvester" }}
|
||
|
|
kind: HarvesterConfig
|
||
|
|
{{- else if eq $.Values.cloudprovider "digitalocean" }}
|
||
|
|
kind: DigitaloceanConfig
|
||
|
|
{{- else if eq $.Values.cloudprovider "azure" }}
|
||
|
|
kind: AzureConfig
|
||
|
|
{{- else if eq $.Values.cloudprovider "elemental" }}
|
||
|
|
apiVersion: elemental.cattle.io/v1beta1
|
||
|
|
kind: MachineInventorySelectorTemplate
|
||
|
|
{{- end}}
|
||
|
|
name: {{ $clustername }}-{{ $nodepool.name }}
|
||
|
|
displayName: {{ $nodepool.displayName | default $nodepool.name }}
|
||
|
|
{{- if $nodepool.drainBeforeDelete }}
|
||
|
|
drainBeforeDelete: {{ $nodepool.drainBeforeDelete }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if $nodepool.drainBeforeDeleteTimeout }}
|
||
|
|
drainBeforeDeleteTimeout: {{ $nodepool.drainBeforeDeleteTimeout }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if $nodepool.machineDeploymentLabels }}
|
||
|
|
machineDeploymentLabels:
|
||
|
|
{{ toYaml $nodepool.machineDeploymentLabels | indent 8 }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if $nodepool.machineDeploymentAnnotations }}
|
||
|
|
machineDeploymentAnnotations:
|
||
|
|
{{ toYaml $nodepool.machineDeploymentAnnotations | indent 8 }}
|
||
|
|
{{- end }}
|
||
|
|
paused: {{ $nodepool.paused }}
|
||
|
|
{{- if $nodepool.rollingUpdate }}
|
||
|
|
rollingUpdate:
|
||
|
|
maxUnavailable: {{ $nodepool.rollingUpdate.maxUnavailable }}
|
||
|
|
maxSurge: {{ $nodepool.rollingUpdate.maxSurge }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if $nodepool.unhealthyNodeTimeout }}
|
||
|
|
unhealthyNodeTimeout: {{ $nodepool.unhealthyNodeTimeout }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if or .Values.cluster.config.controlPlaneConfig .Values.cluster.config.workerConfig}}
|
||
|
|
machineSelectorConfig:
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig }}
|
||
|
|
- config:
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.cni }}
|
||
|
|
cni: {{ .Values.cluster.config.controlPlaneConfig.cni }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.docker }}
|
||
|
|
docker: {{ .Values.cluster.config.controlPlaneConfig.docker }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.disable }}
|
||
|
|
disable: {{ .Values.cluster.config.globalConfig.disable | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.disable_scheduler }}
|
||
|
|
disable-scheduler: {{ .Values.cluster.config.globalConfig.disable_scheduler }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.disable_cloud_controller }}
|
||
|
|
disable-cloud-controller: {{ .Values.cluster.config.globalConfig.disable_cloud_controller }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.disable_kube_proxy }}
|
||
|
|
disable-kube-proxy: {{ .Values.cluster.config.controlPlaneConfig.disable_kube_proxy }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.etcd_expose_metrics }}
|
||
|
|
etcd-expose-metrics: {{ .Values.cluster.config.controlPlaneConfig.etcd_expose_metrics }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.profile }}
|
||
|
|
profile: {{ .Values.cluster.config.controlPlaneConfig.profile }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.selinux }}
|
||
|
|
selinux: {{ .Values.cluster.config.controlPlaneConfig.selinux }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.tls_san }}
|
||
|
|
tls-san: {{ .Values.cluster.config.controlPlaneConfig.tls_san | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.token }}
|
||
|
|
token: {{ .Values.cluster.config.controlPlaneConfig.token }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.systemDefaultRegistry }}
|
||
|
|
system-default-registry: {{ .Values.cluster.config.controlPlaneConfig.systemDefaultRegistry }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.secrets_encryption }}
|
||
|
|
secrets-encryption: {{ .Values.cluster.config.controlPlaneConfig.secrets_encryption }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.write_kubeconfig_mode }}
|
||
|
|
write-kubeconfig-mode: {{ .Values.cluster.config.controlPlaneConfig.write_kubeconfig_mode }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.use_service_account_credentials }}
|
||
|
|
use-service-account-credentials: {{ .Values.cluster.config.controlPlaneConfig.use_service_account_credentials }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.protect_kernel_defaults }}
|
||
|
|
protect-kernel-defaults: {{ .Values.cluster.config.controlPlaneConfig.protect_kernel_defaults }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.cloud_provider_name }}
|
||
|
|
cloud-provider-name: {{ .Values.cluster.config.controlPlaneConfig.cloud_provider_name }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.cloud_provider_config }}
|
||
|
|
cloud-provider-config: {{ .Values.cluster.config.controlPlaneConfig.cloud_provider_config }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.kube_controller_manager_arg }}
|
||
|
|
kube-controller-manager-arg: {{ .Values.cluster.config.controlPlaneConfig.kube_controller_manager_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.kube_scheduler_arg }}
|
||
|
|
kube-scheduler-arg: {{ .Values.cluster.config.controlPlaneConfig.kube_scheduler_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.kube_apiserver_arg }}
|
||
|
|
kube-apiserver-arg: {{ .Values.cluster.config.controlPlaneConfig.kube_apiserver_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.kubelet_proxy_arg }}
|
||
|
|
kubelet-proxy-arg: {{ .Values.cluster.config.controlPlaneConfig.kubelet_proxy_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.controlPlaneConfig.kubelet_arg }}
|
||
|
|
kubelet-arg: {{ .Values.cluster.config.controlPlaneConfig.kubelet_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
machineLabelSelector:
|
||
|
|
matchLabels:
|
||
|
|
node-role.kubernetes.io/control-plane: "true"
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig }}
|
||
|
|
- config:
|
||
|
|
{{- if .Values.cluster.config.workerConfig.cni }}
|
||
|
|
cni: {{ .Values.cluster.config.workerConfig.cni }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.docker }}
|
||
|
|
docker: {{ .Values.cluster.config.workerConfig.docker }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.disable }}
|
||
|
|
disable: {{ .Values.cluster.config.globalConfig.disable | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.disable_scheduler }}
|
||
|
|
disable-scheduler: {{ .Values.cluster.config.globalConfig.disable_scheduler }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.globalConfig.disable_cloud_controller }}
|
||
|
|
disable-cloud-controller: {{ .Values.cluster.config.globalConfig.disable_cloud_controller }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.disable_kube_proxy }}
|
||
|
|
disable-kube-proxy: {{ .Values.cluster.config.workerConfig.disable_kube_proxy }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.etcd_expose_metrics }}
|
||
|
|
etcd-expose-metrics: {{ .Values.cluster.config.workerConfig.etcd_expose_metrics }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.profile }}
|
||
|
|
profile: {{ .Values.cluster.config.workerConfig.profile }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.selinux }}
|
||
|
|
selinux: {{ .Values.cluster.config.workerConfig.selinux }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.tls_san }}
|
||
|
|
tls-san: {{ .Values.cluster.config.workerConfig.tls_san | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.token }}
|
||
|
|
token: {{ .Values.cluster.config.workerConfig.token }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.systemDefaultRegistry }}
|
||
|
|
system-default-registry: {{ .Values.cluster.config.workerConfig.systemDefaultRegistry }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.secrets_encryption }}
|
||
|
|
secrets-encryption: {{ .Values.cluster.config.workerConfig.secrets_encryption }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.write_kubeconfig_mode }}
|
||
|
|
write-kubeconfig-mode: {{ .Values.cluster.config.workerConfig.write_kubeconfig_mode }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.use_service_account_credentials }}
|
||
|
|
use-service-account-credentials: {{ .Values.cluster.config.workerConfig.use_service_account_credentials }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.protect_kernel_defaults }}
|
||
|
|
protect-kernel-defaults: {{ .Values.cluster.config.workerConfig.protect_kernel_defaults }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.cloud_provider_name }}
|
||
|
|
cloud-provider-name: {{ .Values.cluster.config.workerConfig.cloud_provider_name }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.cloud_provider_config }}
|
||
|
|
cloud-provider-config: {{ .Values.cluster.config.workerConfig.cloud_provider_config }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.kube_controller_manager_arg }}
|
||
|
|
kube-controller-manager-arg: {{ .Values.cluster.config.workerConfig.kube_controller_manager_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.kube_scheduler_arg }}
|
||
|
|
kube-scheduler-arg: {{ .Values.cluster.config.workerConfig.kube_scheduler_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.kube_apiserver_arg }}
|
||
|
|
kube-apiserver-arg: {{ .Values.cluster.config.workerConfig.kube_apiserver_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.kubelet_proxy_arg }}
|
||
|
|
kubelet-proxy-arg: {{ .Values.cluster.config.workerConfig.kubelet_proxy_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.workerConfig.kubelet_arg }}
|
||
|
|
kubelet-arg: {{ .Values.cluster.config.workerConfig.kubelet_arg | toRawJson }}
|
||
|
|
{{- end }}
|
||
|
|
machineLabelSelector:
|
||
|
|
matchLabels:
|
||
|
|
rke.cattle.io/worker-role: "true"
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
# machineSelectorFiles:
|
||
|
|
# provisionGeneration:
|
||
|
|
{{- if and .Values.cluster.config.registries (eq .Values.cluster.config.registries.enabled true) }}
|
||
|
|
registries:
|
||
|
|
configs:
|
||
|
|
{{- range .Values.cluster.config.registries.configs }}
|
||
|
|
{{ .name }}:
|
||
|
|
authConfigSecretName: {{ .authConfigSecretName }}
|
||
|
|
caBundle: {{ .caBundle }}
|
||
|
|
insecureSkipVerify: {{ .insecureSkipVerify }}
|
||
|
|
tlsSecretName: {{ .tlsSecretName }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.cluster.config.registries.mirrors }}
|
||
|
|
mirrors:
|
||
|
|
{{- range .Values.cluster.config.registries.mirrors }}
|
||
|
|
{{ .name | quote }}:
|
||
|
|
endpoint:
|
||
|
|
{{- range .endpoints }}
|
||
|
|
- {{ . }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .rewrite }}
|
||
|
|
rewrite:
|
||
|
|
{{- range $key, $value := .rewrite }}
|
||
|
|
"{{ $key }}": "{{ $value }}"
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
# rotateCertificates:
|
||
|
|
# rotateEncryptionKeys:
|
||
|
|
{{- if .Values.cluster.config.upgradeStrategy }}
|
||
|
|
upgradeStrategy:
|
||
|
|
controlPlaneConcurrency: {{ .Values.cluster.config.upgradeStrategy.controlPlaneConcurrency }}
|
||
|
|
{{- if eq .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.enabled true }}
|
||
|
|
controlPlaneDrainOptions:
|
||
|
|
enabled: {{ .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.enabled }}
|
||
|
|
deleteEmptyDirData: {{ .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.deleteEmptyDirData }}
|
||
|
|
disableEviction: {{ .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.disableEviction }}
|
||
|
|
force: {{ .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.force }}
|
||
|
|
gracePeriod: {{ .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.gracePeriod }}
|
||
|
|
ignoreDaemonSets: {{ .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.ignoreDaemonSets }}
|
||
|
|
ignoreErrors: {{ .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.ignoreErrors }}
|
||
|
|
skipWaitForDeleteTimeoutSeconds: {{ .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.skipWaitForDeleteTimeoutSeconds }}
|
||
|
|
timeout: {{ .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.timeout }}
|
||
|
|
{{- else }}
|
||
|
|
controlPlaneDrainOptions:
|
||
|
|
enabled: {{ .Values.cluster.config.upgradeStrategy.controlPlaneDrainOptions.enabled }}
|
||
|
|
{{- end }}
|
||
|
|
workerConcurrency: {{ .Values.cluster.config.upgradeStrategy.workerConcurrency }}
|
||
|
|
{{- if eq .Values.cluster.config.upgradeStrategy.workerDrainOptions.enabled true }}
|
||
|
|
workerDrainOptions:
|
||
|
|
enabled: {{ .Values.cluster.config.upgradeStrategy.workerDrainOptions.enabled }}
|
||
|
|
deleteEmptyDirData: {{ .Values.cluster.config.upgradeStrategy.workerDrainOptions.deleteEmptyDirData }}
|
||
|
|
disableEviction: {{ .Values.cluster.config.upgradeStrategy.workerDrainOptions.disableEviction }}
|
||
|
|
force: {{ .Values.cluster.config.upgradeStrategy.workerDrainOptions.force }}
|
||
|
|
gracePeriod: {{ .Values.cluster.config.upgradeStrategy.workerDrainOptions.gracePeriod }}
|
||
|
|
ignoreDaemonSets: {{ .Values.cluster.config.upgradeStrategy.workerDrainOptions.ignoreDaemonSets }}
|
||
|
|
ignoreErrors: {{ .Values.cluster.config.upgradeStrategy.workerDrainOptions.ignoreErrors }}
|
||
|
|
skipWaitForDeleteTimeoutSeconds: {{ .Values.cluster.config.upgradeStrategy.workerDrainOptions.skipWaitForDeleteTimeoutSeconds }}
|
||
|
|
timeout: {{ .Values.cluster.config.upgradeStrategy.workerDrainOptions.timeout }}
|
||
|
|
{{- else }}
|
||
|
|
workerDrainOptions:
|
||
|
|
enabled: {{ .Values.cluster.config.upgradeStrategy.workerDrainOptions.enabled }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|