feat: release kubezero 1.20-11 incl. various bare-metal fixes

This commit is contained in:
Stefan Reimer 2021-10-07 16:43:12 +02:00
parent 4ca722ef72
commit 9a925df170
6 changed files with 9 additions and 4 deletions

View File

@ -2,7 +2,7 @@ apiVersion: v2
name: kubeadm name: kubeadm
description: KubeZero Kubeadm golden config description: KubeZero Kubeadm golden config
type: application type: application
version: 1.20.8 version: 1.20.11
home: https://kubezero.com home: https://kubezero.com
icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png
keywords: keywords:

View File

@ -5,8 +5,6 @@
{{ template "chart.description" . }} {{ template "chart.description" . }}
Installs the Istio control plane
{{ template "chart.homepageLine" . }} {{ template "chart.homepageLine" . }}
{{ template "chart.maintainersSection" . }} {{ template "chart.maintainersSection" . }}

View File

@ -23,10 +23,12 @@ etcd:
{{- end }} {{- end }}
# These will only be used to create the etcd certs but removed for Init/Join kudeadm calls allowing us to sneak in aliases for etcd nodes # These will only be used to create the etcd certs but removed for Init/Join kudeadm calls allowing us to sneak in aliases for etcd nodes
serverCertSANs: serverCertSANs:
- "{{ .Values.listenAddress }}"
- "{{ .Values.etcd.nodeName }}" - "{{ .Values.etcd.nodeName }}"
- "{{ .Values.etcd.nodeName }}.{{ .Values.domain }}" - "{{ .Values.etcd.nodeName }}.{{ .Values.domain }}"
- "{{ .Values.domain }}" - "{{ .Values.domain }}"
peerCertSANs: peerCertSANs:
- "{{ .Values.listenAddress }}"
- "{{ .Values.etcd.nodeName }}" - "{{ .Values.etcd.nodeName }}"
- "{{ .Values.etcd.nodeName }}.{{ .Values.domain }}" - "{{ .Values.etcd.nodeName }}.{{ .Values.domain }}"
- "{{ .Values.domain }}" - "{{ .Values.domain }}"
@ -57,6 +59,7 @@ apiServer:
audit-log-maxsize: "100" audit-log-maxsize: "100"
audit-log-maxbackup: "3" audit-log-maxbackup: "3"
audit-log-compress: "true" audit-log-compress: "true"
bind-address: {{ .Values.listenAddress }}
tls-cipher-suites: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" tls-cipher-suites: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
admission-control-config-file: /etc/kubernetes/apiserver/admission-configuration.yaml admission-control-config-file: /etc/kubernetes/apiserver/admission-configuration.yaml
{{- if eq .Values.platform "aws" }} {{- if eq .Values.platform "aws" }}

View File

@ -3,6 +3,7 @@ kind: InitConfiguration
metadata: metadata:
name: kubezero-initconfiguration name: kubezero-initconfiguration
localAPIEndpoint: localAPIEndpoint:
advertiseAddress: {{ .Values.listenAddress }}
bindPort: {{ .Values.api.listenPort }} bindPort: {{ .Values.api.listenPort }}
nodeRegistration: nodeRegistration:
ignorePreflightErrors: ignorePreflightErrors:

View File

@ -18,3 +18,6 @@ nodeRegistration:
{{- with .Values.providerID }} {{- with .Values.providerID }}
provider-id: {{ . }} provider-id: {{ . }}
{{- end }} {{- end }}
{{- if ne .Values.listenAddress "0.0.0.0" }}
node-ip: {{ .Values.listenAddress }}
{{- end }}

View File

@ -2,5 +2,5 @@ apiVersion: kubeproxy.config.k8s.io/v1alpha1
kind: KubeProxyConfiguration kind: KubeProxyConfiguration
metadata: metadata:
name: kubezero-kubeproxyconfiguration name: kubezero-kubeproxyconfiguration
metricsBindAddress: "{{ .Values.listenAddress }}:10249" metricsBindAddress: "0.0.0.0:10249"
mode: "" mode: ""