mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-02-03 18:48:17 -03:30
7f90fc7b12
Simplify registry mirror rendering in config.toml. The map filter can extract the host list from mirrors so we can just unique them and render them without needing to construct vars for it. For the registry mirror tls section, we can first extract mirrors from the dict then filter on only the ones having skip_veridy defined first and then filter on the ones having true (as the dict might not have skip_verify defined and that would cause errors of undefined var). This will speed up and simply the templating. Signed-off-by: Seena Fallah <seenafallah@gmail.com>
113 lines
4.8 KiB
Django/Jinja
113 lines
4.8 KiB
Django/Jinja
version = 2
|
|
root = "{{ containerd_storage_dir }}"
|
|
state = "{{ containerd_state_dir }}"
|
|
oom_score = {{ containerd_oom_score }}
|
|
|
|
{% if containerd_extra_args is defined %}
|
|
{{ containerd_extra_args }}
|
|
{% endif %}
|
|
|
|
[grpc]
|
|
max_recv_message_size = {{ containerd_grpc_max_recv_message_size }}
|
|
max_send_message_size = {{ containerd_grpc_max_send_message_size }}
|
|
|
|
[debug]
|
|
address = "{{ containerd_debug_address }}"
|
|
level = "{{ containerd_debug_level }}"
|
|
format = "{{ containerd_debug_format }}"
|
|
uid = {{ containerd_debug_uid }}
|
|
gid = {{ containerd_debug_gid }}
|
|
|
|
[metrics]
|
|
address = "{{ containerd_metrics_address }}"
|
|
grpc_histogram = {{ containerd_metrics_grpc_histogram | lower }}
|
|
|
|
[plugins]
|
|
[plugins."io.containerd.grpc.v1.cri"]
|
|
sandbox_image = "{{ pod_infra_image_repo }}:{{ pod_infra_image_tag }}"
|
|
max_container_log_line_size = {{ containerd_max_container_log_line_size }}
|
|
enable_unprivileged_ports = {{ containerd_enable_unprivileged_ports | lower }}
|
|
enable_unprivileged_icmp = {{ containerd_enable_unprivileged_icmp | lower }}
|
|
enable_selinux = {{ containerd_enable_selinux | lower }}
|
|
disable_apparmor = {{ containerd_disable_apparmor | lower }}
|
|
tolerate_missing_hugetlb_controller = {{ containerd_tolerate_missing_hugetlb_controller | lower }}
|
|
disable_hugetlb_controller = {{ containerd_disable_hugetlb_controller | lower }}
|
|
image_pull_progress_timeout = "{{ containerd_image_pull_progress_timeout }}"
|
|
{% if enable_cdi %}
|
|
enable_cdi = true
|
|
cdi_spec_dirs = ["/etc/cdi", "/var/run/cdi"]
|
|
{% endif %}
|
|
[plugins."io.containerd.grpc.v1.cri".containerd]
|
|
default_runtime_name = "{{ containerd_default_runtime }}"
|
|
snapshotter = "{{ containerd_snapshotter }}"
|
|
discard_unpacked_layers = {{ containerd_discard_unpacked_layers | lower }}
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes]
|
|
{% for runtime in [containerd_runc_runtime] + containerd_additional_runtimes %}
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.{{ runtime.name }}]
|
|
runtime_type = "{{ runtime.type }}"
|
|
runtime_engine = "{{ runtime.engine }}"
|
|
runtime_root = "{{ runtime.root }}"
|
|
{% if runtime.base_runtime_spec is defined %}
|
|
base_runtime_spec = "{{ containerd_cfg_dir }}/{{ runtime.base_runtime_spec }}"
|
|
{% endif %}
|
|
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.{{ runtime.name }}.options]
|
|
{% for key, value in runtime.options.items() %}
|
|
{% if value | string != "true" and value | string != "false" %}
|
|
{{ key }} = "{{ value }}"
|
|
{% else %}
|
|
{{ key }} = {{ value }}
|
|
{% endif %}
|
|
{% endfor %}
|
|
{% endfor %}
|
|
{% if kata_containers_enabled %}
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.kata-qemu]
|
|
runtime_type = "io.containerd.kata-qemu.v2"
|
|
{% endif %}
|
|
{% if gvisor_enabled %}
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runsc]
|
|
runtime_type = "io.containerd.runsc.v1"
|
|
{% endif %}
|
|
[plugins."io.containerd.grpc.v1.cri".registry]
|
|
{% if containerd_use_config_path is defined and containerd_use_config_path|bool %}
|
|
config_path = "{{ containerd_cfg_dir }}/certs.d"
|
|
{% else %}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
|
|
{% for registry in containerd_registries_mirrors %}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."{{ registry.prefix }}"]
|
|
endpoint = {{ registry.mirrors | map(attribute='host') | unique | to_json }}
|
|
{% endfor %}
|
|
{% for mirror in containerd_registries_mirrors | map(attribute='mirrors') | flatten | selectattr('skip_verify', 'defined') | selectattr('skip_verify') | unique %}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.configs."{{ mirror.host | urlsplit('netloc') }}".tls]
|
|
insecure_skip_verify = true
|
|
{% endfor %}
|
|
{% endif %}
|
|
{% for registry in containerd_registry_auth if registry['registry'] is defined %}
|
|
{% if (registry['username'] is defined and registry['password'] is defined) or registry['auth'] is defined %}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.configs."{{ registry['registry'] }}".auth]
|
|
{% if registry['username'] is defined and registry['password'] is defined %}
|
|
password = "{{ registry['password'] }}"
|
|
username = "{{ registry['username'] }}"
|
|
{% else %}
|
|
auth = "{{ registry['auth'] }}"
|
|
{% endif %}
|
|
{% endif %}
|
|
{% endfor %}
|
|
|
|
{% if nri_enabled and containerd_version is version('1.7.0', '>=') %}
|
|
[plugins."io.containerd.nri.v1.nri"]
|
|
disable = false
|
|
{% endif %}
|
|
|
|
{% if containerd_tracing_enabled %}
|
|
[plugins."io.containerd.tracing.processor.v1.otlp"]
|
|
endpoint = "{{ containerd_tracing_endpoint }}"
|
|
protocol = "{{ containerd_tracing_protocol }}"
|
|
{% if containerd_tracing_protocol == "grpc" %}
|
|
insecure = false
|
|
{% endif %}
|
|
[plugins."io.containerd.internal.v1.tracing"]
|
|
sampling_ratio = {{ containerd_tracing_sampling_ratio }}
|
|
service_name = "{{ containerd_tracing_service_name }}"
|
|
{% endif %}
|