xoxys.k3s/templates/_internal/apiserver-arg.yaml.j2

14 lines
713 B
Django/Jinja

#jinja2: lstrip_blocks: True
- anonymous-auth=false
- authorization-mode=Node,RBAC
- profiling=0
- service-account-lookup=true
- tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- admission-control-config-file=/etc/rancher/k3s/server/admission-config.yaml
{% if k3s_server_admission_plugins | length > 0 %}
- enable-admission-plugins={{ k3s_server_admission_plugins | join(',') }}
{% endif %}
{% if k3s_server_feature_gates | length > 0 %}
- feature-gates={{ k3s_server_feature_gates | join(',') }}
{%- endif %}