2021-02-26 01:34:15 +00:00
|
|
|
--- charts-original/values.yaml
|
|
|
|
+++ charts/values.yaml
|
|
|
|
@@ -3,8 +3,8 @@
|
|
|
|
# Declare variables to be passed into your templates.
|
|
|
|
|
|
|
|
image:
|
|
|
|
- repository: coredns/coredns
|
2021-07-23 09:10:25 +00:00
|
|
|
- tag: "1.8.4"
|
2021-02-26 01:34:15 +00:00
|
|
|
+ repository: rancher/hardened-coredns
|
2021-07-19 08:35:26 +00:00
|
|
|
+ tag: "v1.8.3-build20210720"
|
2021-02-26 01:34:15 +00:00
|
|
|
pullPolicy: IfNotPresent
|
|
|
|
|
|
|
|
replicaCount: 1
|
2021-07-23 09:10:25 +00:00
|
|
|
@@ -69,10 +69,10 @@
|
|
|
|
annotations: {}
|
2021-02-26 01:34:15 +00:00
|
|
|
|
|
|
|
serviceAccount:
|
|
|
|
- create: false
|
|
|
|
+ create: true
|
|
|
|
# The name of the ServiceAccount to use
|
|
|
|
# If not set and create is true, a name is generated using the fullname template
|
2021-07-23 09:10:25 +00:00
|
|
|
- name: ""
|
|
|
|
+ name: "coredns"
|
|
|
|
annotations: {}
|
2021-02-26 01:34:15 +00:00
|
|
|
|
|
|
|
rbac:
|
2021-07-23 09:10:25 +00:00
|
|
|
@@ -88,7 +88,7 @@
|
2021-02-26 01:34:15 +00:00
|
|
|
isClusterService: true
|
|
|
|
|
|
|
|
# Optional priority class to be used for the coredns pods. Used for autoscaler if autoscaler.priorityClassName not set.
|
|
|
|
-priorityClassName: ""
|
|
|
|
+priorityClassName: "system-cluster-critical"
|
|
|
|
|
|
|
|
# Default zone is what Kubernetes recommends:
|
|
|
|
# https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/#coredns-configmap-options
|
2021-07-23 09:10:25 +00:00
|
|
|
@@ -179,7 +179,13 @@
|
2021-05-27 19:12:25 +00:00
|
|
|
# operator: Equal
|
|
|
|
# value: master
|
|
|
|
# effect: NoSchedule
|
|
|
|
-tolerations: []
|
2021-07-23 09:10:25 +00:00
|
|
|
+tolerations:
|
2021-05-27 19:12:25 +00:00
|
|
|
+- key: "node-role.kubernetes.io/control-plane"
|
|
|
|
+ operator: "Exists"
|
|
|
|
+ effect: "NoSchedule"
|
|
|
|
+- key: "node-role.kubernetes.io/etcd"
|
|
|
|
+ operator: "Exists"
|
|
|
|
+ effect: "NoExecute"
|
|
|
|
|
|
|
|
# https://kubernetes.io/docs/tasks/run-application/configure-pdb/#specifying-a-poddisruptionbudget
|
|
|
|
podDisruptionBudget: {}
|
2021-07-23 09:10:25 +00:00
|
|
|
@@ -227,7 +233,7 @@
|
2021-07-19 08:35:26 +00:00
|
|
|
# See https://github.com/kubernetes-incubator/cluster-proportional-autoscaler
|
|
|
|
autoscaler:
|
|
|
|
# Enabled the cluster-proportional-autoscaler
|
|
|
|
- enabled: false
|
|
|
|
+ enabled: true
|
|
|
|
|
|
|
|
# Number of cores in the cluster per coredns replica
|
|
|
|
coresPerReplica: 256
|
2021-07-23 09:10:25 +00:00
|
|
|
@@ -243,8 +249,8 @@
|
|
|
|
preventSinglePointFailure: true
|
2021-07-19 08:35:26 +00:00
|
|
|
|
|
|
|
image:
|
|
|
|
- repository: k8s.gcr.io/cluster-proportional-autoscaler-amd64
|
2021-07-23 09:10:25 +00:00
|
|
|
- tag: "1.8.1"
|
2021-08-02 17:40:30 +00:00
|
|
|
+ repository: rancher/hardened-cluster-autoscaler
|
|
|
|
+ tag: "v1.8.3-build20210729"
|
2021-07-19 08:35:26 +00:00
|
|
|
pullPolicy: IfNotPresent
|
|
|
|
|
|
|
|
# Optional priority class to be used for the autoscaler pods. priorityClassName used if not set.
|
2021-08-05 11:57:31 +00:00
|
|
|
@@ -258,16 +264,22 @@
|
2021-05-27 19:12:25 +00:00
|
|
|
nodeSelector: {}
|
|
|
|
|
|
|
|
# expects input structure as per specification https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.11/#toleration-v1-core
|
|
|
|
- tolerations: []
|
|
|
|
+ tolerations:
|
|
|
|
+ - key: "node-role.kubernetes.io/control-plane"
|
|
|
|
+ operator: "Exists"
|
|
|
|
+ effect: "NoSchedule"
|
|
|
|
+ - key: "node-role.kubernetes.io/etcd"
|
|
|
|
+ operator: "Exists"
|
|
|
|
+ effect: "NoExecute"
|
|
|
|
|
|
|
|
# resources for autoscaler pod
|
|
|
|
resources:
|
2021-08-05 11:57:31 +00:00
|
|
|
requests:
|
|
|
|
cpu: "20m"
|
|
|
|
- memory: "10Mi"
|
|
|
|
+ memory: "20Mi"
|
|
|
|
limits:
|
|
|
|
cpu: "20m"
|
|
|
|
- memory: "10Mi"
|
|
|
|
+ memory: "20Mi"
|
|
|
|
|
|
|
|
# Options for autoscaler configmap
|
|
|
|
configmap:
|
2021-07-27 09:08:32 +00:00
|
|
|
@@ -287,3 +299,19 @@
|
2021-07-23 09:10:25 +00:00
|
|
|
deployment:
|
|
|
|
enabled: true
|
|
|
|
name: ""
|
|
|
|
+
|
2021-02-26 01:34:15 +00:00
|
|
|
+k8sApp : "kube-dns"
|
|
|
|
+
|
2021-07-20 15:44:40 +00:00
|
|
|
+nodelocal:
|
|
|
|
+ enabled: false
|
|
|
|
+ ip_address: "169.254.20.10"
|
|
|
|
+ ipvs: false
|
|
|
|
+ image:
|
2021-08-02 17:40:30 +00:00
|
|
|
+ repository: rancher/hardened-dns-node-cache
|
2021-08-03 17:24:08 +00:00
|
|
|
+ tag: "1.20.0-build20210803"
|
2021-07-27 09:08:32 +00:00
|
|
|
+ initimage:
|
2021-08-02 17:40:30 +00:00
|
|
|
+ repository: rancher/hardened-dns-node-cache
|
2021-08-03 17:24:08 +00:00
|
|
|
+ tag: "1.20.0-build20210803"
|
2021-07-20 15:44:40 +00:00
|
|
|
+
|
2021-02-26 01:34:15 +00:00
|
|
|
+global:
|
|
|
|
+ systemDefaultRegistry: ""
|