grachevkoandGitHub
e502e0ff76
Label Sync / Label Sync (push) Failing after 1m7s
E2E / reject-invalid (bad-bgp-asn) (push) Skipped
E2E / reject-invalid (bad-mac-address) (push) Skipped
E2E / reject-invalid (bad-repo-url) (push) Skipped
E2E / reject-invalid (bad-vlan-tag) (push) Skipped
E2E / reject-invalid (duplicate-gateway-addrs) (push) Skipped
E2E / reject-invalid (duplicate-node-names) (push) Skipped
E2E / reject-invalid (gateway-node-collision) (push) Skipped
E2E / reject-invalid (missing-dns-token) (push) Skipped
E2E / reject-invalid (nested-cidr-overlap) (push) Skipped
E2E / reject-invalid (node-addr-outside-cidr) (push) Skipped
E2E / reject-invalid (tunnel-without-dns) (push) Skipped
E2E / accept-valid (selfhosted) (push) Skipped
E2E / reject-invalid (missing-known-hosts) (push) Skipped
E2E / reject-invalid (missing-schematic) (push) Skipped
E2E / reject-invalid (partial-bgp) (push) Skipped
E2E / accept-valid (internal) (push) Skipped
E2E / reject-invalid (missing-external-gateway) (push) Skipped
E2E / reject-invalid (node-uses-gateway-addr) (push) Skipped
E2E / reject-invalid (non-canonical-cidr) (push) Skipped
E2E / accept-valid (private) (push) Skipped
E2E / accept-valid (single-node) (push) Skipped
E2E / reject-invalid (overlapping-cidrs) (push) Skipped
E2E / reject-invalid (reserved-node-name) (push) Skipped
E2E / reject-invalid (tiny-svc-cidr) (push) Skipped
E2E / validator-tests (push) Skipped
E2E / accept-valid (direct) (push) Skipped
E2E / accept-valid (multi-controller) (push) Skipped
E2E / accept-valid (no-webhook) (push) Skipped
E2E / accept-valid (public) (push) Skipped
63 lines
1.4 KiB
YAML
63 lines
1.4 KiB
YAML
cluster:
|
|
etcd:
|
|
extraArgs:
|
|
listen-metrics-urls: http://0.0.0.0:2381
|
|
advertisedSubnets:
|
|
- #{ network.node_cidr }#
|
|
---
|
|
# Allow scheduling on control-plane nodes
|
|
apiVersion: v1alpha1
|
|
kind: KubeNodeConfig
|
|
taints:
|
|
node-role.kubernetes.io/control-plane:
|
|
$patch: delete
|
|
---
|
|
apiVersion: v1alpha1
|
|
kind: KubeAdmissionControlConfig
|
|
name: PodSecurity
|
|
$patch: delete
|
|
---
|
|
apiVersion: v1alpha1
|
|
kind: KubeAPIServerConfig
|
|
certExtraSANs:
|
|
#% for item in cert_sans %#
|
|
- "#{ item }#"
|
|
#% endfor %#
|
|
extraArgs:
|
|
# https://kubernetes.io/docs/tasks/extend-kubernetes/configure-aggregation-layer/
|
|
enable-aggregator-routing: "true"
|
|
---
|
|
apiVersion: v1alpha1
|
|
kind: KubeControllerManagerConfig
|
|
extraArgs:
|
|
bind-address: 0.0.0.0
|
|
---
|
|
apiVersion: v1alpha1
|
|
kind: KubeCoreDNSConfig
|
|
enabled: false
|
|
---
|
|
# Disable built-in CNI and kube-proxy to use Cilium
|
|
apiVersion: v1alpha1
|
|
kind: KubeFlannelCNIConfig
|
|
$patch: delete
|
|
---
|
|
apiVersion: v1alpha1
|
|
kind: KubeProxyConfig
|
|
enabled: false
|
|
---
|
|
apiVersion: v1alpha1
|
|
kind: KubeSchedulerConfig
|
|
extraArgs:
|
|
bind-address: 0.0.0.0
|
|
config:
|
|
profiles:
|
|
- schedulerName: default-scheduler
|
|
pluginConfig:
|
|
- name: PodTopologySpread
|
|
args:
|
|
defaultingType: List
|
|
defaultConstraints:
|
|
- maxSkew: 1
|
|
topologyKey: kubernetes.io/hostname
|
|
whenUnsatisfiable: ScheduleAnyway
|