treasuremap/global/software/config/Kubelet.yaml
Evgeny L c88eb575b8 Add Airship-in-a-Bottle site manifests and scripts
Note: all scripts in tools/deployment/aiab directory have been
moved into this repository as is (except a few changes to make
them work), they require a heavy refactoring that will be done
in separate patch-sets.

* Add a virtual single node manifests that are based on a sloop type.
* Use NFS provisioner instead of Ceph.
* Update tools/openstack to be non-seaworthy specific, use a default
  region name and auth url.
* Make type/sloop/config/common-software-config.yaml to be site specific,
  to allow to configure custom region_name.
* Remove max-pods-per-cpu parameter for kubelet, treasuremap needs
  to support a diverse set of environments, without constraints
  on the number of available cores. Max pods configuration parameter
  is still present and helps to mitigate problems when kubernetes
  unexpectedly starts a large number of pods.

Change-Id: I379a50d810b91b989f039dbb7c691f5ceec0cc67
2019-05-24 16:23:07 +00:00

36 lines
918 B
YAML

---
schema: promenade/Kubelet/v1
metadata:
schema: metadata/Document/v1
name: kubelet
layeringDefinition:
abstract: false
layer: global
storagePolicy: cleartext
substitutions:
- src:
schema: pegleg/SoftwareVersions/v1
name: software-versions
path: .images.kubernetes.pause
dest:
path: .images.pause
- src:
schema: pegleg/SeccompProfile/v1
name: seccomp-default
path: .seccompDirPath
dest:
path: .arguments[9]
pattern: SECCOMP_PROFILE_ROOT
data:
arguments:
- --cni-bin-dir=/opt/cni/bin
- --cni-conf-dir=/etc/cni/net.d
- --eviction-max-pod-grace-period=-1
- --network-plugin=cni
- --node-status-update-frequency=5s
- --max-pods=200
- --kube-api-burst=40
- --kube-api-qps=20
- --seccomp-profile-root=SECCOMP_PROFILE_ROOT
- --feature-gates=PodShareProcessNamespace=true