diff options
author | Devan Goodwin <dgoodwin@redhat.com> | 2016-03-23 16:16:47 -0300 |
---|---|---|
committer | Devan Goodwin <dgoodwin@redhat.com> | 2016-04-01 13:26:24 -0300 |
commit | 89db887bd536156421fbc701c5d1b46656070347 (patch) | |
tree | e327d53004131bda6a2f766cd8c784bea58ea8bd /roles/etcd_ca/templates | |
parent | c8f5f05df668eaa6502b17fed9dc8099e7fab258 (diff) | |
download | openshift-89db887bd536156421fbc701c5d1b46656070347.tar.gz openshift-89db887bd536156421fbc701c5d1b46656070347.tar.bz2 openshift-89db887bd536156421fbc701c5d1b46656070347.tar.xz openshift-89db887bd536156421fbc701c5d1b46656070347.zip |
Add support for templating master admissionConfig.
Adds four new inventory variables for setting sections in "admissionConfig" and
"kubernetesMasterConfig.admissionConfig".
openshift_master_admission_plugin_order allows configuring the list of origin
admission controller plugins to enable and what order to run them in. This must
be a JSON formatted list of strings:
openshift_master_admission_plugin_order=["RunOnceDuration", "NamespaceLifecycle", "OriginPodNodeEnvironment", "ClusterResourceOverride", "LimitRanger", "ServiceAccount", "SecurityContextConstraint", "ResourceQuota", "SCCExecRestrictions"]
openshift_master_kube_admission_plugin_order is identical but for the
kubernetes admission controller plugins which appear beneath
kubernetesMasterConfig.
openshift_master_admission_plugin_config allows setting free-form configuration
stanzas that match up with enabled admission controller plugins. This must be a
JSON formatted hash:
openshift_master_admission_plugin_config={"RunOnceDuration":{"configuration":{"apiVersion":"v1","kind":"RunOnceDurationConfig","activeDeadlineSecondsOverride":3600}},"ClusterResourceOverride":{"configuration":{"apiVersion":"v1","kind":"ClusterResourceOverrideConfig","limitCPUToMemoryPercent":200,"cpuRequestToLimitPercent":6,"memoryRequestToLimitPercent":60}}}
openshift_master_kube_admission_plugin_config is the equivalent for kubernetes
admission controller plugins.
Contains a change to merge_facts to fix issues with modifying inventory
variables that contain JSON dicts. If you modified a previously set variable,
the result would be a merge of old and new, which is completely wrong in this
case. Addded new overwrite_facts to shortcut to just taking the new values.
This differs from the pre-existing concept of "protected" in that we're not
protecting an old value, we're trashing it and taking the new.
Diffstat (limited to 'roles/etcd_ca/templates')
0 files changed, 0 insertions, 0 deletions