From 1113058e7e66a03763ccc81c35716e7d0013e158 Mon Sep 17 00:00:00 2001 From: Devin Buhl Date: Sat, 16 Apr 2022 08:50:34 -0400 Subject: [PATCH] fix: update feature flags on k3s masters --- .../inventory/group_vars/master/k3s.yml | 18 ++++++++++++------ 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/provision/ansible/inventory/group_vars/master/k3s.yml b/provision/ansible/inventory/group_vars/master/k3s.yml index 3a1fe166..1cba8004 100644 --- a/provision/ansible/inventory/group_vars/master/k3s.yml +++ b/provision/ansible/inventory/group_vars/master/k3s.yml @@ -31,21 +31,27 @@ k3s_server: # Network CIDR to use for service IPs service-cidr: "10.43.0.0/16" kubelet-arg: - # Enables the kubelet to gracefully evict pods during a node shutdown - - "feature-gates=GracefulNodeShutdown=true" # Allow k8s services to contain TCP and UDP on the same port - "feature-gates=MixedProtocolLBService=true" - # Required to monitor kube-controller-manager with kube-prometheus-stack kube-controller-manager-arg: + # Allow k8s services to contain TCP and UDP on the same port + - "feature-gates=MixedProtocolLBService=true" + # Required to monitor kube-controller-manager with kube-prometheus-stack - "bind-address=0.0.0.0" - # Required to monitor kube-proxy with kube-prometheus-stack kube-proxy-arg: + # Allow k8s services to contain TCP and UDP on the same port + - "feature-gates=MixedProtocolLBService=true" + # Required to monitor kube-proxy with kube-prometheus-stack - "metrics-bind-address=0.0.0.0" - # Required to monitor kube-scheduler with kube-prometheus-stack kube-scheduler-arg: + # Allow k8s services to contain TCP and UDP on the same port + - "feature-gates=MixedProtocolLBService=true" + # Required to monitor kube-scheduler with kube-prometheus-stack - "bind-address=0.0.0.0" # Required to monitor etcd with kube-prometheus-stack etcd-expose-metrics: true - # Required for HAProxy health-checks kube-apiserver-arg: + # Allow k8s services to contain TCP and UDP on the same port + - "feature-gates=MixedProtocolLBService=true" + # Required for HAProxy health-checks - "anonymous-auth=true"