adrien/ansible-role-kubernetes
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Securing k3s deployment

Browse source
This commit is contained in:
Adrien Reslinger 2024-09-01 14:36:15 +02:00
parent 3fd4c7dee0
commit 5717cca04d
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
7 changed files with 153 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
templates/kubeadm-config.yaml.j2
View file

@ -55,7 +55,7 @@ controlPlaneEndpoint: "{{ lookup('vars', 'ansible_' + kubernetes_interface ).ipv
{% endif %}
apiServer:
extraArgs:
enable-admission-plugins: NodeRestriction
enable-admission-plugins: NodeRestriction,AlwaysPullImages,EventRateLimit
authorization-mode: "Node,RBAC"
audit-policy-file: "/etc/kubernetes/policies/audit-policy.yaml"
audit-log-path: "/var/log/apiserver/audit.log"