@@ -125,22 +125,14 @@ certificatesDir: {{ kube_cert_dir }}
125
125
imageRepository: {{ kube_image_repo }}
126
126
apiServer:
127
127
extraArgs:
128
- {% if kube_apiserver_etcd_compaction_interval is defined %}
129
128
- name: etcd-compaction-interval
130
129
value: "{{ kube_apiserver_etcd_compaction_interval }}"
131
- {% endif %}
132
- {% if kube_apiserver_pod_eviction_not_ready_timeout_seconds is defined %}
133
130
- name: default-not-ready-toleration-seconds
134
131
value: "{{ kube_apiserver_pod_eviction_not_ready_timeout_seconds }}"
135
- {% endif %}
136
- {% if kube_apiserver_pod_eviction_unreachable_timeout_seconds is defined %}
137
132
- name: default-unreachable-toleration-seconds
138
133
value: "{{ kube_apiserver_pod_eviction_unreachable_timeout_seconds }}"
139
- {% endif %}
140
- {% if kube_api_anonymous_auth is defined %}
141
134
- name: anonymous-auth
142
135
value: "{{ kube_api_anonymous_auth }}"
143
- {% endif %}
144
136
{% if kube_apiserver_use_authorization_config_file %}
145
137
- name: authorization-config
146
138
value: "{{ kube_config_dir }}/apiserver-authorization-config-{{ kube_apiserver_authorization_config_api_version }}.yaml"
@@ -186,7 +178,7 @@ apiServer:
186
178
- name: service-account-lookup
187
179
value: "{{ kube_apiserver_service_account_lookup }}"
188
180
{% endif %}
189
- {% if kube_oidc_auth | default ( false ) and kube_oidc_url is defined and kube_oidc_client_id is defined %}
181
+ {% if kube_oidc_auth and kube_oidc_url is defined and kube_oidc_client_id is defined %}
190
182
- name: oidc-issuer-url
191
183
value: "{{ kube_oidc_url }}"
192
184
- name: oidc-client-id
@@ -212,7 +204,7 @@ apiServer:
212
204
value: "{{ kube_oidc_groups_prefix }}"
213
205
{% endif %}
214
206
{% endif %}
215
- {% if kube_webhook_token_auth | default ( false ) %}
207
+ {% if kube_webhook_token_auth %}
216
208
- name: authentication-token-webhook-config-file
217
209
value: "{{ kube_config_dir }}/webhook-token-auth-config.yaml"
218
210
{% endif %}
@@ -274,10 +266,8 @@ apiServer:
274
266
- name: tls-cipher-suites
275
267
value: "{% for tls in tls_cipher_suites %} {{ tls }}{{ ',' if not loop.last else '' }}{% endfor %} "
276
268
{% endif %}
277
- {% if event_ttl_duration is defined %}
278
269
- name: event-ttl
279
270
value: "{{ event_ttl_duration }}"
280
- {% endif %}
281
271
{% if kubelet_rotate_server_certificates %}
282
272
- name: kubelet-certificate-authority
283
273
value: "{{ kube_cert_dir }}/ca.crt"
@@ -293,12 +283,12 @@ apiServer:
293
283
hostPath: {{ kube_token_dir }}
294
284
mountPath: {{ kube_token_dir }}
295
285
{% endif %}
296
- {% if kube_webhook_token_auth | default ( false ) %}
286
+ {% if kube_webhook_token_auth %}
297
287
- name: webhook-token-auth-config
298
288
hostPath: {{ kube_config_dir }}/webhook-token-auth-config.yaml
299
289
mountPath: {{ kube_config_dir }}/webhook-token-auth-config.yaml
300
290
{% endif %}
301
- {% if kube_webhook_authorization | default ( false ) %}
291
+ {% if kube_webhook_authorization %}
302
292
- name: webhook-authorization-config
303
293
hostPath: {{ kube_config_dir }}/webhook-authorization-config.yaml
304
294
mountPath: {{ kube_config_dir }}/webhook-authorization-config.yaml
@@ -395,12 +385,6 @@ controllerManager:
395
385
- name: "{{ key }}"
396
386
value: "{{ kube_kubeadm_controller_extra_args[key] }}"
397
387
{% endfor %}
398
- {% if cloud_provider is defined and cloud_provider in ["openstack" , "azure" , "vsphere" , "aws" , "gce" ] %}
399
- - name: cloud-provider
400
- value: "{{ cloud_provider }}"
401
- - name: cloud-config
402
- value: "{{ kube_config_dir }}/cloud_config"
403
- {% endif %}
404
388
{% if kube_network_plugin is defined and kube_network_plugin not in ["cloud" ] %}
405
389
- name: configure-cloud-routes
406
390
value: "false"
@@ -417,18 +401,8 @@ controllerManager:
417
401
- name: tls-cipher-suites
418
402
value: "{% for tls in tls_cipher_suites %} {{ tls }}{{ ',' if not loop.last else '' }}{% endfor %} "
419
403
{% endif %}
420
- {% if cloud_provider is defined and cloud_provider in [ "openstack" , "azure" , "vsphere" , "aws" , "gce" ] or controller_manager_extra_volumes %}
404
+ {% if controller_manager_extra_volumes %}
421
405
extraVolumes:
422
- {% if cloud_provider is defined and cloud_provider in ["openstack" ] and openstack_cacert is defined %}
423
- - name: openstackcacert
424
- hostPath: "{{ kube_config_dir }}/openstack-cacert.pem"
425
- mountPath: "{{ kube_config_dir }}/openstack-cacert.pem"
426
- {% endif %}
427
- {% if cloud_provider is defined and cloud_provider in ["openstack" , "azure" , "vsphere" , "aws" , "gce" ] %}
428
- - name: cloud-config
429
- hostPath: {{ kube_config_dir }}/cloud_config
430
- mountPath: {{ kube_config_dir }}/cloud_config
431
- {% endif %}
432
406
{% for volume in controller_manager_extra_volumes %}
433
407
- name: {{ volume.name }}
434
408
hostPath: {{ volume.hostPath }}
0 commit comments