From 90eff07152b41dd61e77481b1a26e4e192b309d1 Mon Sep 17 00:00:00 2001 From: Devin Buhl Date: Thu, 7 Dec 2023 17:10:58 -0500 Subject: [PATCH] feat: enable secrets encryption on k3s Signed-off-by: Devin Buhl --- .../templates/ansible/inventory/group_vars/master/main.yaml.j2 | 1 + 1 file changed, 1 insertion(+) diff --git a/bootstrap/templates/ansible/inventory/group_vars/master/main.yaml.j2 b/bootstrap/templates/ansible/inventory/group_vars/master/main.yaml.j2 index 1b070403..ed384310 100644 --- a/bootstrap/templates/ansible/inventory/group_vars/master/main.yaml.j2 +++ b/bootstrap/templates/ansible/inventory/group_vars/master/main.yaml.j2 @@ -26,6 +26,7 @@ k3s_server: disable-kube-proxy: true # Cilium uses eBPF write-kubeconfig-mode: "644" pause-image: registry.k8s.io/pause:3.9 + secrets-encryption: true {% if bootstrap_ipv6_enabled | default(false) %} cluster-cidr: "{% raw %}{{ cluster_cidr }},{{ cluster_cidr_v6 }}{% endraw %}" service-cidr: "{% raw %}{{ service_cidr }},{{ service_cidr_v6 }}{% endraw %}"