KubeZero - ZeroDownTime Kubernetes Platform
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

81 lines
2.0 KiB

annotateKubeSystemNameSpace: false
kiam:
enabled: true
server:
# kiam.server.assumeRoleArn -- kiam server IAM role to assume, required as we run the agents next to the servers normally, eg. arn:aws:iam::123456789012:role/kiam-server-role
assumeRoleArn: ''
useHostNetwork: true
sslCertHostPath: /etc/ssl/certs
tlsSecret: kiam-server-tls
tlsCerts:
certFileName: tls.crt
keyFileName: tls.key
caFileName: ca.crt
service:
port: 6444
targetPort: 6444
deployment:
enabled: true
replicas: 1
updateStrategy: RollingUpdate
resources:
requests:
memory: "64Mi"
cpu: "50m"
limits:
memory: "128Mi"
# cpu: "300m"
tolerations:
- key: node-role.kubernetes.io/master
effect: NoSchedule
nodeSelector:
node-role.kubernetes.io/master: ""
priorityClassName: system-cluster-critical
prometheus:
servicemonitor:
enabled: false
interval: 30s
labels:
release: metrics
log:
level: info
agent:
gatewayTimeoutCreation: "5s"
updateStrategy: RollingUpdate
# IP tables set on each node at boot, see CloudBender
host:
iptables: false
interface: "cali+"
allowRouteRegexp: '^/latest/(meta-data/instance-id|dynamic)'
sslCertHostPath: /etc/ssl/certs
tlsSecret: kiam-agent-tls
tlsCerts:
certFileName: tls.crt
keyFileName: tls.key
caFileName: ca.crt
resources:
requests:
memory: "16Mi"
cpu: "50m"
limits:
memory: "64Mi"
# cpu: "50m"
tolerations:
- key: node-role.kubernetes.io/master
effect: NoSchedule
priorityClassName: system-node-critical
prometheus:
servicemonitor:
enabled: false
interval: 30s
labels:
release: metrics
log:
level: info
# extraEnv:
# - name: GRPC_GO_LOG_SEVERITY_LEVEL
# value: "info"
# - name: GRPC_GO_LOG_VERBOSITY_LEVEL
# value: "8"