--- schema: promenade/Genesis/v1 metadata: schema: metadata/Document/v1 name: genesis layeringDefinition: abstract: false layer: site storagePolicy: cleartext substitutions: - src: schema: promenade/EncryptionPolicy/v1 name: encryption-policy path: .etcd dest: path: .apiserver.encryption data: hostname: n0 ip: 192.168.77.10 external_ip: 192.168.77.10 apiserver: arguments: - --authorization-mode=Node,RBAC - --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota,DefaultTolerationSeconds,NodeRestriction,EventRateLimit - --service-cluster-ip-range=10.96.0.0/16 - --endpoint-reconciler-type=lease - --feature-gates=PodShareProcessNamespace=true - --admission-control-config-file=/etc/kubernetes/apiserver/acconfig.yaml - --encryption-provider-config=/etc/kubernetes/apiserver/encryption_provider.yaml - --v=3 armada: target_manifest: cluster-bootstrap tiller: storage: secret etcd: auxiliary_threshold: 3 labels: dynamic: - calico-etcd=enabled - coredns=enabled - kubernetes-apiserver=enabled - kubernetes-controller-manager=enabled - kubernetes-etcd=enabled - kubernetes-scheduler=enabled - promenade-genesis=enabled - ucp-control-plane=enabled haproxy: run_as_user: 65534 images: armada: quay.io/airshipit/armada:master-ubuntu_xenial helm: tiller: gcr.io/kubernetes-helm/tiller:v2.16.1 kubernetes: apiserver: k8s.gcr.io/kube-apiserver-amd64:v1.18.6 controller-manager: k8s.gcr.io/kube-controller-manager-amd64:v1.18.6 etcd: quay.io/coreos/etcd:v3.4.13 scheduler: k8s.gcr.io/kube-scheduler-amd64:v1.18.6 files: - path: /var/lib/anchor/calico-etcd-bootstrap content: "# placeholder for triggering calico etcd bootstrapping" mode: 0644 # NOTE(mark-burnett): These are referenced by the apiserver arguments above. - path: /etc/genesis/apiserver/acconfig.yaml mode: 0444 content: | kind: AdmissionConfiguration apiVersion: apiserver.k8s.io/v1alpha1 plugins: - name: EventRateLimit path: eventconfig.yaml - path: /etc/genesis/apiserver/eventconfig.yaml mode: 0444 content: | kind: Configuration apiVersion: eventratelimit.admission.k8s.io/v1alpha1 limits: - type: Server qps: 1000 burst: 10000 ...