The man page for _containers-certs.d(5)_ says that subdirectories of `/etc/containers/certs.d` should be named `host:port`, however, this is a bit misleading. It seems instead, the directory name must match the name of the registry server as specified, so in the case of a server that supports HTTPS on port 443, where the port would be omitted from the image name, it must also be omitted from the `certs.d` subdirectory name.
24 lines
550 B
YAML
24 lines
550 B
YAML
samba_interfaces:
|
|
- '{{ ansible_default_ipv4.interface }}'
|
|
host_uses_firewalld: false
|
|
collectd_processes_kubelet:
|
|
- name: crio
|
|
- name: kubelet
|
|
collectd_processes_controller:
|
|
- name: etcd
|
|
- name: kube-apiserver
|
|
- name: kube-controller
|
|
collectd_df_ignore_mountpoint:
|
|
- /etc/cni/net.d
|
|
- /opt/cni
|
|
- /usr/libexec/kubernetes/kubelet-plugins
|
|
|
|
container_registries:
|
|
- location: docker-hub.proxy.pyrocufflink.blue
|
|
prefix: docker.io
|
|
|
|
container_registry_certs:
|
|
docker-hub.proxy.pyrocufflink.blue:
|
|
ca: >-
|
|
{{ lookup('file', 'dch-root-ca-r2.crt') }}
|