ansible-collections/kubernetes
2
0
Fork 0
Code Issues 8 Pull Requests 1 Actions Projects Releases 28 Wiki Activity

feat(audit_logs): keep two days by default

Browse Source 
!12
This commit is contained in:
Jon Lockwood
2023-11-29 19:35:45 +09:30
parent 59699afb44
commit 7369163195
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
defaults/main.yml
View File

@ -21,6 +21,7 @@ kubernetes_etcd_snapshot_retention: 5
kubernetes_type: k8s # Mandatory, String. choice K8s | k3s kubernetes_type: k8s # Mandatory, String. choice K8s | k3s
kube_apiserver_arg_audit_log_maxbackup: 2
kubelet_arg_system_reserved_cpu: 450m kubelet_arg_system_reserved_cpu: 450m
kubelet_arg_system_reserved_memory: 512Mi kubelet_arg_system_reserved_memory: 512Mi

1
templates/k3s-config.yaml.j2
View File

@ -26,6 +26,7 @@ etcd-snapshot-schedule-cron: "{{ kubernetes_etcd_snapshot_cron_schedule }}"
flannel-backend: none flannel-backend: none
kube-apiserver-arg: kube-apiserver-arg:
- audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log - audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log
- audit-log-maxbackup={{ kube_apiserver_arg_audit_log_maxbackup }}
- audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml - audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml
# - admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml # - admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml
{% if kubernetes_config.cluster.oidc.enabled | default(false) | bool -%} {% if kubernetes_config.cluster.oidc.enabled | default(false) | bool -%}