ansible-collections/kubernetes
2
0
Fork 0
Code Issues 8 Pull Requests 1 Actions Projects Releases 28 Wiki Activity

fix(audit_log): max age not backup

Browse Source 
!12
This commit is contained in:
Jon Lockwood
2023-11-30 15:46:17 +09:30
parent 4a41f7e348
commit ea38ddf22b
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -21,7 +21,7 @@ kubernetes_etcd_snapshot_retention: 5
kubernetes_type: k8s # Mandatory, String. choice K8s | k3s
kube_apiserver_arg_audit_log_maxbackup: 2
kube_apiserver_arg_audit_log_maxage: 2
kubelet_arg_system_reserved_cpu: 450m
kubelet_arg_system_reserved_memory: 512Mi

2
templates/k3s-config.yaml.j2
View File

@ -26,7 +26,7 @@ etcd-snapshot-schedule-cron: "{{ kubernetes_etcd_snapshot_cron_schedule }}"
flannel-backend: none
kube-apiserver-arg:
- audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log
- audit-log-maxbackup={{ kube_apiserver_arg_audit_log_maxbackup }}
- audit-log-maxage={{ kube_apiserver_arg_audit_log_maxage }}
- audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml
# - admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml
{% if kubernetes_config.cluster.oidc.enabled | default(false) | bool -%}