Files
configpolicy/group_vars/kubelet.yml
Dustin C. Hatch f7546791cc kubelet: Fix CA cert for Docker Hub proxy
The man page for _containers-certs.d(5)_ says that subdirectories of
`/etc/containers/certs.d` should be named `host:port`, however, this is
a bit misleading.  It seems instead, the directory name must match the
name of the registry server as specified, so in the case of a server
that supports HTTPS on port 443, where the port would be omitted from
the image name, it must also be omitted from the `certs.d` subdirectory
name.
2025-07-16 16:05:19 -05:00

24 lines
550 B
YAML

samba_interfaces:
- '{{ ansible_default_ipv4.interface }}'
host_uses_firewalld: false
collectd_processes_kubelet:
- name: crio
- name: kubelet
collectd_processes_controller:
- name: etcd
- name: kube-apiserver
- name: kube-controller
collectd_df_ignore_mountpoint:
- /etc/cni/net.d
- /opt/cni
- /usr/libexec/kubernetes/kubelet-plugins
container_registries:
- location: docker-hub.proxy.pyrocufflink.blue
prefix: docker.io
container_registry_certs:
docker-hub.proxy.pyrocufflink.blue:
ca: >-
{{ lookup('file', 'dch-root-ca-r2.crt') }}