infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity

feat(k3s): enable encryption at rest and stargz snapshotter

Browse Source
This commit is contained in:
Devin Buhl authored and GitHub committed 2023-11-22 20:15:04 -05:00
1 parent 30cccac0ce
commit fdff319d4f
1 file changed
+2
Download Patch File Download Diff File Expand all files Collapse all files
bootstrap/templates/ansible/inventory/group_vars/master/main.yaml.j2
+2
View File
@@ -24,6 +24,8 @@ k3s_server:
disable-network-policy: true disable-network-policy: true
disable-cloud-controller: true disable-cloud-controller: true
disable-kube-proxy: true # Cilium uses eBPF disable-kube-proxy: true # Cilium uses eBPF
secrets-encryption: true
snapshotter: stargz
write-kubeconfig-mode: "644" write-kubeconfig-mode: "644"
{% if bootstrap_ipv6_enabled | default(false) %} {% if bootstrap_ipv6_enabled | default(false) %}
cluster-cidr: "{% raw %}{{ cluster_cidr }},{{ cluster_cidr_v6 }}{% endraw %}" cluster-cidr: "{% raw %}{{ cluster_cidr }},{{ cluster_cidr_v6 }}{% endraw %}"