|
|
|
@ -19,17 +19,22 @@ metadata:
|
|
|
|
|
name: seccomp-default
|
|
|
|
|
path: .seccompDirPath
|
|
|
|
|
dest:
|
|
|
|
|
path: .arguments[9]
|
|
|
|
|
path: .arguments
|
|
|
|
|
pattern: SECCOMP_PROFILE_ROOT
|
|
|
|
|
recurse:
|
|
|
|
|
depth: 1
|
|
|
|
|
data:
|
|
|
|
|
arguments:
|
|
|
|
|
- --cni-bin-dir=/opt/cni/bin
|
|
|
|
|
- --cni-conf-dir=/etc/cni/net.d
|
|
|
|
|
- --eviction-max-pod-grace-period=-1
|
|
|
|
|
- --network-plugin=cni
|
|
|
|
|
- --node-status-update-frequency=5s
|
|
|
|
|
- --max-pods=200
|
|
|
|
|
- --kube-api-burst=40
|
|
|
|
|
- --kube-api-qps=20
|
|
|
|
|
- --seccomp-profile-root=SECCOMP_PROFILE_ROOT
|
|
|
|
|
- --feature-gates=PodShareProcessNamespace=true
|
|
|
|
|
config_file_overrides:
|
|
|
|
|
evictionMaxPodGracePeriod: -1
|
|
|
|
|
featureGates:
|
|
|
|
|
PodShareProcessNamespace: true
|
|
|
|
|
TaintBasedEvictions: false
|
|
|
|
|
kubeAPIBurst: 40
|
|
|
|
|
kubeAPIQPS: 20
|
|
|
|
|
maxPods: 200
|
|
|
|
|
nodeStatusUpdateFrequency: "5s"
|
|
|
|
|