scl/kubespray
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add-kube-profile-to-scheduler (#9993)

Browse Source
This commit is contained in:
Kay Yan
2023-04-18 09:54:58 +08:00
committed by GitHub
parent e907d55621
commit c98e1d1b5b
3 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/hardening.md
View File

@ -76,8 +76,6 @@ kube_controller_feature_gates: ["RotateKubeletServerCertificate=true"]
## kube-scheduler ## kube-scheduler
kube_scheduler_bind_address: 127.0.0.1 kube_scheduler_bind_address: 127.0.0.1
kube_kubeadm_scheduler_extra_args:
profiling: false
# AppArmor-based OS # AppArmor-based OS
# kube_scheduler_feature_gates: ["AppArmor=true"] # kube_scheduler_feature_gates: ["AppArmor=true"]

1
roles/kubernetes/control-plane/templates/kubeadm-config.v1beta3.yaml.j2
View File

@ -351,6 +351,7 @@ scheduler:
{% if kube_scheduler_feature_gates or kube_feature_gates %} {% if kube_scheduler_feature_gates or kube_feature_gates %}
feature-gates: "{{ kube_scheduler_feature_gates | default(kube_feature_gates, true) | join(',') }}" feature-gates: "{{ kube_scheduler_feature_gates | default(kube_feature_gates, true) | join(',') }}"
{% endif %} {% endif %}
profiling: "{{ kube_profiling }}"
{% if kube_kubeadm_scheduler_extra_args|length > 0 %} {% if kube_kubeadm_scheduler_extra_args|length > 0 %}
{% for key in kube_kubeadm_scheduler_extra_args %} {% for key in kube_kubeadm_scheduler_extra_args %}
{{ key }}: "{{ kube_kubeadm_scheduler_extra_args[key] }}" {{ key }}: "{{ kube_kubeadm_scheduler_extra_args[key] }}"

2
tests/files/packet_ubuntu20-calico-aio-hardening.yml
View File

@ -70,8 +70,6 @@ kube_controller_feature_gates: ["RotateKubeletServerCertificate=true", "AppArmor
## kube-scheduler ## kube-scheduler
kube_scheduler_bind_address: 127.0.0.1 kube_scheduler_bind_address: 127.0.0.1
kube_kubeadm_scheduler_extra_args:
profiling: false
# AppArmor-based OS # AppArmor-based OS
kube_scheduler_feature_gates: ["AppArmor=true"] kube_scheduler_feature_gates: ["AppArmor=true"]