Merge pull request #17354 from ameukam/admission-controllers

Enable more admission controllers
This commit is contained in:
Kubernetes Prow Robot 2025-04-26 22:51:24 -07:00 committed by GitHub
commit 78d4757c18
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
267 changed files with 1108 additions and 774 deletions

View File

@ -34,7 +34,7 @@ contents: |
- --client-ca-file=/srv/kubernetes/ca.crt
- --cloud-config=/etc/kubernetes/in-tree-cloud.config
- --cloud-provider=external
- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,NodeRestriction,ResourceQuota
- --enable-admission-plugins=DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,NodeRestriction,ResourceQuota,RuntimeClass,ServiceAccount,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook
- --etcd-cafile=/srv/kubernetes/kube-apiserver/etcd-ca.crt
- --etcd-certfile=/srv/kubernetes/kube-apiserver/etcd-client.crt
- --etcd-keyfile=/srv/kubernetes/kube-apiserver/etcd-client.key

View File

@ -48,7 +48,7 @@ contents: |
- --client-ca-file=/srv/kubernetes/ca.crt
- --cloud-config=/etc/kubernetes/in-tree-cloud.config
- --cloud-provider=external
- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,NodeRestriction,ResourceQuota
- --enable-admission-plugins=DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,NodeRestriction,ResourceQuota,RuntimeClass,ServiceAccount,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook
- --etcd-cafile=/srv/kubernetes/kube-apiserver/etcd-ca.crt
- --etcd-certfile=/srv/kubernetes/kube-apiserver/etcd-client.crt
- --etcd-keyfile=/srv/kubernetes/kube-apiserver/etcd-client.key

View File

@ -26,7 +26,7 @@ contents: |
- --client-ca-file=/srv/kubernetes/ca.crt
- --cloud-config=/etc/kubernetes/in-tree-cloud.config
- --cloud-provider=external
- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,NodeRestriction,ResourceQuota
- --enable-admission-plugins=DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,NodeRestriction,ResourceQuota,RuntimeClass,ServiceAccount,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook
- --etcd-cafile=/srv/kubernetes/kube-apiserver/etcd-ca.crt
- --etcd-certfile=/srv/kubernetes/kube-apiserver/etcd-client.crt
- --etcd-keyfile=/srv/kubernetes/kube-apiserver/etcd-client.key

View File

@ -26,7 +26,7 @@ contents: |
- --client-ca-file=/srv/kubernetes/ca.crt
- --cloud-config=/etc/kubernetes/in-tree-cloud.config
- --cloud-provider=external
- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,NodeRestriction,ResourceQuota
- --enable-admission-plugins=DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,NodeRestriction,ResourceQuota,RuntimeClass,ServiceAccount,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook
- --etcd-cafile=/srv/kubernetes/kube-apiserver/etcd-ca.crt
- --etcd-certfile=/srv/kubernetes/kube-apiserver/etcd-client.crt
- --etcd-keyfile=/srv/kubernetes/kube-apiserver/etcd-client.key

View File

@ -24,7 +24,7 @@ contents: |
- --authorization-mode=AlwaysAllow
- --bind-address=0.0.0.0
- --client-ca-file=/srv/kubernetes/ca.crt
- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,NodeRestriction,ResourceQuota
- --enable-admission-plugins=DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,NodeRestriction,ResourceQuota,RuntimeClass,ServiceAccount,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook
- --etcd-cafile=/srv/kubernetes/kube-apiserver/etcd-ca.crt
- --etcd-certfile=/srv/kubernetes/kube-apiserver/etcd-client.crt
- --etcd-keyfile=/srv/kubernetes/kube-apiserver/etcd-client.key

View File

@ -26,7 +26,7 @@ contents: |
- --client-ca-file=/srv/kubernetes/ca.crt
- --cloud-config=/etc/kubernetes/in-tree-cloud.config
- --cloud-provider=external
- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,NodeRestriction,ResourceQuota
- --enable-admission-plugins=DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,NodeRestriction,ResourceQuota,RuntimeClass,ServiceAccount,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook
- --etcd-cafile=/srv/kubernetes/kube-apiserver/etcd-ca.crt
- --etcd-certfile=/srv/kubernetes/kube-apiserver/etcd-client.crt
- --etcd-keyfile=/srv/kubernetes/kube-apiserver/etcd-client.key

View File

@ -26,7 +26,7 @@ contents: |
- --client-ca-file=/srv/kubernetes/ca.crt
- --cloud-config=/etc/kubernetes/in-tree-cloud.config
- --cloud-provider=external
- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,NodeRestriction,ResourceQuota
- --enable-admission-plugins=DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,NodeRestriction,ResourceQuota,RuntimeClass,ServiceAccount,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook
- --etcd-cafile=/srv/kubernetes/kube-apiserver/etcd-ca.crt
- --etcd-certfile=/srv/kubernetes/kube-apiserver/etcd-client.crt
- --etcd-keyfile=/srv/kubernetes/kube-apiserver/etcd-client.key

View File

@ -26,7 +26,7 @@ contents: |
- --client-ca-file=/srv/kubernetes/ca.crt
- --cloud-config=/etc/kubernetes/in-tree-cloud.config
- --cloud-provider=external
- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,NodeRestriction,ResourceQuota
- --enable-admission-plugins=DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,NodeRestriction,ResourceQuota,RuntimeClass,ServiceAccount,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook
- --etcd-cafile=/srv/kubernetes/kube-apiserver/etcd-ca.crt
- --etcd-certfile=/srv/kubernetes/kube-apiserver/etcd-client.crt
- --etcd-keyfile=/srv/kubernetes/kube-apiserver/etcd-client.key

View File

@ -26,7 +26,7 @@ contents: |
- --client-ca-file=/srv/kubernetes/ca.crt
- --cloud-config=/etc/kubernetes/in-tree-cloud.config
- --cloud-provider=external
- --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,NodeRestriction,ResourceQuota
- --enable-admission-plugins=DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,NodeRestriction,ResourceQuota,RuntimeClass,ServiceAccount,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook
- --etcd-cafile=/srv/kubernetes/kube-apiserver/etcd-ca.crt
- --etcd-certfile=/srv/kubernetes/kube-apiserver/etcd-client.crt
- --etcd-keyfile=/srv/kubernetes/kube-apiserver/etcd-client.key

View File

@ -147,21 +147,21 @@ func (b *KubeAPIServerOptionsBuilder) BuildOptions(cluster *kops.Cluster) error
}
}
// TODO: We can probably rewrite these more clearly in descending order
// Based on recommendations from:
// https://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use
// https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/
{
c.EnableAdmissionPlugins = []string{
"NamespaceLifecycle",
"LimitRanger",
"ServiceAccount",
//"PersistentVolumeLabel",
"DefaultStorageClass",
"DefaultTolerationSeconds",
"LimitRanger",
"MutatingAdmissionWebhook",
"ValidatingAdmissionWebhook",
"NamespaceLifecycle",
"NodeRestriction",
"ResourceQuota",
"RuntimeClass",
"ServiceAccount",
"ValidatingAdmissionPolicy",
"ValidatingAdmissionWebhook",
}
c.EnableAdmissionPlugins = append(c.EnableAdmissionPlugins, c.AppendAdmissionPlugins...)
}

View File

@ -130,7 +130,7 @@ ClusterName: additionalobjects.example.com
ConfigBase: memfs://tests/additionalobjects.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: Fs2hbQ1UTITDVKZyfQgIjd55UiUucLBjwNrWgCrMXT8=
NodeupConfigHash: 0meC2r1xzntznUBmhrowlZ15R1orWyhfcqnQO/L7fzo=
__EOF_KUBE_ENV

View File

@ -71,15 +71,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: minimal.example.com
ConfigBase: memfs://clusters.example.com/minimal.example.com
InstanceGroupName: apiserver
InstanceGroupRole: APIServer
NodeupConfigHash: DGxbW0XRm7D5zB9YwjGlYU7alrRcRG85ySGSp39Mk1E=
NodeupConfigHash: AgCyoFYOQwCZEOAgf2qNhCsimY8Uec8L91X/tYvfK/w=
__EOF_KUBE_ENV

View File

@ -130,7 +130,7 @@ ClusterName: minimal.example.com
ConfigBase: memfs://clusters.example.com/minimal.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: oat4TLWZZOwj65R6CKin5eR7GMvLjjtMZK541q480iE=
NodeupConfigHash: P8AZpsNu0IcynnqI+pa1TYDzCrWTi7Lmiydk+eADVUg=
__EOF_KUBE_ENV

View File

@ -64,15 +64,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: minimal.example.com
ConfigBase: memfs://clusters.example.com/minimal.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: hwe4qrB8lrpQUByJDxUeDm6WzYWNuE7nQHAfP5g5nQo=
NodeupConfigHash: kaj//kni7EON1tJan0zbwiVDX7DJH7p7u+F5gzQWU+M=
__EOF_KUBE_ENV

View File

@ -69,15 +69,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: bastionuserdata.example.com
ConfigBase: memfs://clusters.example.com/bastionuserdata.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: /CMrJEa3vry2ndHUBbapU9y1w15UKdldYMHe4/Il0ic=
NodeupConfigHash: esf5IJa5KiGsVm/r4EJ1yLqsGLtxhDSebXYvFY8+g2c=
__EOF_KUBE_ENV

View File

@ -66,15 +66,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -12,15 +12,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: cas-priority-expander-custom.example.com
ConfigBase: memfs://clusters.example.com/cas-priority-expander-custom.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: lqrSzC/HkARFePSIR7bgPBUBlM3HsZGxpFrTx66sn1k=
NodeupConfigHash: V9jtpA9K9rCvzZnOmyUyTwnWRstkveohbN39ZDuT8TA=
__EOF_KUBE_ENV

View File

@ -88,15 +88,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: cas-priority-expander.example.com
ConfigBase: memfs://clusters.example.com/cas-priority-expander.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: enuVLbFsywKaNY0DSUNgNQ9IQvTDd5e5YlxQOOzrnVg=
NodeupConfigHash: BxVvSOHqvyfw54cB2P3pg0SLJ+5QQOxpoT9QIyZ5sr8=
__EOF_KUBE_ENV

View File

@ -81,15 +81,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -139,7 +139,7 @@ ClusterName: complex.example.com
ConfigBase: memfs://clusters.example.com/complex.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: Bs0VktUnEG71qqsma591CR4EQOBN57RHWCW7CLaVHas=
NodeupConfigHash: WvC1wUpG4d4O1mmRXE6MNSH3eeZj663fDXwXlMZ1cBY=
__EOF_KUBE_ENV

View File

@ -90,15 +90,17 @@ spec:
cpuLimit: 500m
cpuRequest: 200m
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -17,15 +17,17 @@ APIServerConfig:
cpuLimit: 500m
cpuRequest: 200m
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -133,7 +133,7 @@ function download-release() {
echo "== nodeup node config starting =="
ensure-install-dir
echo "H4sIAAAAAAAA/2zOsWrDMBDG8d1PoT04xlNB0CWirQuJiVM6NNtVuqQOOp2qkxr17UvxFMj+//F9xnNx+8Q/s8OkFVylMb5IxjQCoVaWKSYUWWMFih7XlqkxHE7zeQOCWhHSSXTX2UXdhN1d/RokQ7D4krjEZYXg37ZF2oyS2x5uowN71MpwyIn93kPAZmSHJS5HBpAvreh99Tb/ypmP/cPwdHG73Xaqn9dt3Xz3F/yY0vEwDeOqPFd+bP4AAAD//wEAAP//Wk+EjPcAAAA=" | base64 -d | gzip -d > conf/kube_env.yaml
echo "H4sIAAAAAAAA/2zOzUrEMBTF8X2eIi/QqRWUMeBiGkSdRaiznN2d9PZDktyQm9ji04t0VZj9/8c52lHpu0Q/c49JSVhYaFc4YzLgUUlLPiZkPuAKPjo8WPJCUxjmsQVGJT36gVVd203twvqu/gycIVh8T1TituLh31aFq4ycqwb20YUcKqkp5ESucxBQGOqxxO3IB/Ck5FU3X+ZpeqF0CteWnuncueZ2eTjmZX38/j1GcyvBvp3H9vQq/gAAAP//AQAA///9P7RZ9wAAAA==" | base64 -d | gzip -d > conf/kube_env.yaml
download-release
echo "== nodeup node config done =="

View File

@ -64,15 +64,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: containerd.example.com
ConfigBase: memfs://clusters.example.com/containerd.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: kurdQDak4IW5y5zXemSZTL1bmivMlFyqkktNHV6KDQ0=
NodeupConfigHash: JZLOWIIoaaPjoRKEh4fKShu6HpDdFzQXgV4JUXHY2vY=
__EOF_KUBE_ENV

View File

@ -73,15 +73,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: containerd.example.com
ConfigBase: memfs://clusters.example.com/containerd.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: UnhfYjHKvEKf6uGyuZeQE8nWhiKde88/ev/Ltw9rBEA=
NodeupConfigHash: eV+FgGywxdUplNKNKOCQip6nxzICakiYlIxkjBEEG8c=
__EOF_KUBE_ENV

View File

@ -64,15 +64,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: 123.example.com
ConfigBase: memfs://clusters.example.com/123.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: iQRW/DgDicPYkFuudMAT10xGylfYtQsdIv4aLr3iPz0=
NodeupConfigHash: 76p16+iQfgBehkkY7m2mxjUjgpBPAVuUCom7gACTzN8=
__EOF_KUBE_ENV

View File

@ -86,15 +86,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: existing-iam.example.com
ConfigBase: memfs://tests/existing-iam.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: V0NfQj8EcqRFMs4Je3swie/YA7E/vgVhFO3QEENWWWg=
NodeupConfigHash: vIlyK1nbQ+NqeI5APdklK+J62ilRy9Iz6ONs79Iyg6k=
__EOF_KUBE_ENV

View File

@ -130,7 +130,7 @@ ClusterName: existing-iam.example.com
ConfigBase: memfs://tests/existing-iam.example.com
InstanceGroupName: master-us-test-1b
InstanceGroupRole: ControlPlane
NodeupConfigHash: SHk/FaVBp+1YnzcMsqJX3BEA0+AjrBZaUCLH9+lNmhI=
NodeupConfigHash: zT+F0E2yOjDQ/pkcdI2HEJ8MlVtpYbplyD1UyfSG9pI=
__EOF_KUBE_ENV

View File

@ -130,7 +130,7 @@ ClusterName: existing-iam.example.com
ConfigBase: memfs://tests/existing-iam.example.com
InstanceGroupName: master-us-test-1c
InstanceGroupRole: ControlPlane
NodeupConfigHash: UqiUW2RwXvibbcikamT1FcWcg+L/wSrFAwrvo2F403g=
NodeupConfigHash: eZAnMYWWrKNbF7lFBBKrjBy7O2OdRNXI5tQlohxlewA=
__EOF_KUBE_ENV

View File

@ -72,15 +72,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: existingsg.example.com
ConfigBase: memfs://clusters.example.com/existingsg.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: VI6i3YAOECBj4LkUcJtNGoDVp52/JsIVMCK+oQ0Sric=
NodeupConfigHash: bqrD8ou3GVXoncE2yUFWSE9bXNdvvpX3uoRLgawtuKs=
__EOF_KUBE_ENV

View File

@ -130,7 +130,7 @@ ClusterName: existingsg.example.com
ConfigBase: memfs://clusters.example.com/existingsg.example.com
InstanceGroupName: master-us-test-1b
InstanceGroupRole: ControlPlane
NodeupConfigHash: neEB5h7tN2cE8xQlxqVl3MGPIBHpD5ULBK0+rgHiuR0=
NodeupConfigHash: cR/pBel5MsfYInpDoA5zx+rr23sLgoZauVUKYlLSiJ4=
__EOF_KUBE_ENV

View File

@ -130,7 +130,7 @@ ClusterName: existingsg.example.com
ConfigBase: memfs://clusters.example.com/existingsg.example.com
InstanceGroupName: master-us-test-1c
InstanceGroupRole: ControlPlane
NodeupConfigHash: LqFXUhl09XzKG70qa0SxoaM69H3eOQ2LuHNKKKTeNBQ=
NodeupConfigHash: 3OYuLozS8b196x7btF4pTB5cKeO8AiW5EML+D9aMCmc=
__EOF_KUBE_ENV

View File

@ -75,15 +75,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -12,15 +12,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -12,15 +12,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -12,15 +12,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: minimal.example.com
ConfigBase: memfs://clusters.example.com/minimal.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: ucsdJGKI6NlyxcMuxNbIl5QTQ9XH7jlClzx6w6ZSu+I=
NodeupConfigHash: MHRNWN+48Nt+1WSqQQqQY0YilNokCkgmRftFRnAwTWI=
__EOF_KUBE_ENV

View File

@ -64,15 +64,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: minimal.example.com
ConfigBase: memfs://clusters.example.com/minimal.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: hwe4qrB8lrpQUByJDxUeDm6WzYWNuE7nQHAfP5g5nQo=
NodeupConfigHash: kaj//kni7EON1tJan0zbwiVDX7DJH7p7u+F5gzQWU+M=
__EOF_KUBE_ENV

View File

@ -65,15 +65,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: externallb.example.com
ConfigBase: memfs://clusters.example.com/externallb.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: gkLlh0jvZvSPM1aU0VO84JoEWJV0KRUwlCOMkW5D7Fg=
NodeupConfigHash: Oj0ze/dVaSL5ATwWegbEhR9BxSzsh7Mjide1KN8aj70=
__EOF_KUBE_ENV

View File

@ -64,15 +64,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: externalpolicies.example.com
ConfigBase: memfs://clusters.example.com/externalpolicies.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: ANsW469TD3QuP8vNBr5lbhMpndW4BhzSuaDWDjr7ENw=
NodeupConfigHash: oTo8r7xad6XbcXNWhfs4xsYx80YEy5TRZFXk4G+KAtc=
__EOF_KUBE_ENV

View File

@ -80,15 +80,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: ha.example.com
ConfigBase: memfs://tests/ha.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: a/cBjBH0b7oxj6wX4QTdtZBOXQMcZZ9xVo2GQaT/umM=
NodeupConfigHash: ksgDO5ej8p7Mh6RXSTvjh1ayLXuBBbnYKFKfcky9CA0=
__EOF_KUBE_ENV

View File

@ -130,7 +130,7 @@ ClusterName: ha.example.com
ConfigBase: memfs://tests/ha.example.com
InstanceGroupName: master-us-test-1b
InstanceGroupRole: ControlPlane
NodeupConfigHash: Lvs3mTw5mrCA507VeCAq850OsvZ3Un6D5iBJ8QyW2SQ=
NodeupConfigHash: Qd3Ps2/qSNEcTlrpUH0NpNyN6M90y63Rwt6cOdP6kmA=
__EOF_KUBE_ENV

View File

@ -130,7 +130,7 @@ ClusterName: ha.example.com
ConfigBase: memfs://tests/ha.example.com
InstanceGroupName: master-us-test-1c
InstanceGroupRole: ControlPlane
NodeupConfigHash: mSN0tX/kCbZQI7SaKc0py6rEo8Ddu8yB5VSgv4DInl4=
NodeupConfigHash: YMh0l8Qc45XDRuofv8sFSUgp/uEnuMy4gF9K5TexImk=
__EOF_KUBE_ENV

View File

@ -72,15 +72,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -81,15 +81,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -129,7 +129,7 @@ ClusterName: ha-gce.example.com
ConfigBase: memfs://tests/ha-gce.example.com
InstanceGroupName: master-us-test1-a
InstanceGroupRole: ControlPlane
NodeupConfigHash: hPBJj8OJ89zFI0zUcvUOUAof/k5gmpOzhU0UTpf4Mm8=
NodeupConfigHash: oM9dRKxTW39quvju1hTfb+vSEIwddDHGrqILOYG6omw=
__EOF_KUBE_ENV

View File

@ -129,7 +129,7 @@ ClusterName: ha-gce.example.com
ConfigBase: memfs://tests/ha-gce.example.com
InstanceGroupName: master-us-test1-b
InstanceGroupRole: ControlPlane
NodeupConfigHash: jJsUMHmDUBZHoOivF0vmpDefMalqnp5nkF4CnJo6Ous=
NodeupConfigHash: /lYEQ6SF3We36of/CGNKSmysIC9zLizmKmKBEW9u/Jc=
__EOF_KUBE_ENV

View File

@ -129,7 +129,7 @@ ClusterName: ha-gce.example.com
ConfigBase: memfs://tests/ha-gce.example.com
InstanceGroupName: master-us-test1-c
InstanceGroupRole: ControlPlane
NodeupConfigHash: BfZYIQ54OItxyMh2T5UTvm+6lFBDQYAcj4HYkHgzV6k=
NodeupConfigHash: Ui/+lZBT5SD+m34SHjK01yRuwhN24XS4X2+C+d+ISYA=
__EOF_KUBE_ENV

View File

@ -130,7 +130,7 @@ ClusterName: minimal.example.com
ConfigBase: memfs://clusters.example.com/minimal.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: hwe4qrB8lrpQUByJDxUeDm6WzYWNuE7nQHAfP5g5nQo=
NodeupConfigHash: kaj//kni7EON1tJan0zbwiVDX7DJH7p7u+F5gzQWU+M=
__EOF_KUBE_ENV

View File

@ -93,15 +93,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: minimal.example.com
ConfigBase: memfs://clusters.example.com/minimal.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: hwe4qrB8lrpQUByJDxUeDm6WzYWNuE7nQHAfP5g5nQo=
NodeupConfigHash: kaj//kni7EON1tJan0zbwiVDX7DJH7p7u+F5gzQWU+M=
__EOF_KUBE_ENV

View File

@ -73,15 +73,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
etcdServers:
- https://127.0.0.1:4001
etcdServersOverrides:

View File

@ -130,7 +130,7 @@ ClusterName: minimal.example.com
ConfigBase: memfs://clusters.example.com/minimal.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: h2ZfkvYU0XfqQoOk13x7b6kBn24WLViQW8xThQg90JU=
NodeupConfigHash: jj+c6nDmpEvbQvYB2T5rbTwNYEIiRHk6IpBsUr9G9TA=
__EOF_KUBE_ENV

View File

@ -87,15 +87,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
enableAggregatorRouting: true
etcdServers:
- https://127.0.0.1:4001

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
enableAggregatorRouting: true
etcdServers:
- https://127.0.0.1:4001

View File

@ -130,7 +130,7 @@ ClusterName: minimal.example.com
ConfigBase: memfs://clusters.example.com/minimal.example.com
InstanceGroupName: master-us-test-1a
InstanceGroupRole: ControlPlane
NodeupConfigHash: vBJW2myrUYHT/tNqWkomaMQ63E4WdoHXq0dklO9BilQ=
NodeupConfigHash: yAPecsIGWGuyJE70aP/q/SR6IF4E3+vjSk6oyueyoYE=
__EOF_KUBE_ENV

View File

@ -87,15 +87,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
enableAggregatorRouting: true
etcdServers:
- https://127.0.0.1:4001

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
enableAggregatorRouting: true
etcdServers:
- https://127.0.0.1:4001

View File

@ -92,15 +92,17 @@ spec:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
enableAggregatorRouting: true
etcdServers:
- https://127.0.0.1:4001

View File

@ -13,15 +13,17 @@ APIServerConfig:
bindAddress: 0.0.0.0
cloudProvider: external
enableAdmissionPlugins:
- NamespaceLifecycle
- LimitRanger
- ServiceAccount
- DefaultStorageClass
- DefaultTolerationSeconds
- LimitRanger
- MutatingAdmissionWebhook
- ValidatingAdmissionWebhook
- NamespaceLifecycle
- NodeRestriction
- ResourceQuota
- RuntimeClass
- ServiceAccount
- ValidatingAdmissionPolicy
- ValidatingAdmissionWebhook
enableAggregatorRouting: true
etcdServers:
- https://127.0.0.1:4001

View File

@ -129,7 +129,7 @@ ClusterName: minimal.example.com
ConfigBase: memfs://tests/minimal.example.com
InstanceGroupName: master-us-test1-a
InstanceGroupRole: ControlPlane
NodeupConfigHash: ew4dXhZ2kDAuzCCZHPkkeCXTWUB9NQGXJ93u8wx3q1o=
NodeupConfigHash: XGadBjsgFpk4LW/+dvrMW9Zsm04INSiz9IfqrRalHmw=
__EOF_KUBE_ENV

Some files were not shown because too many files have changed in this diff Show More