forked from gardener/gardener
-
Notifications
You must be signed in to change notification settings - Fork 0
/
20-componentconfig-gardenlet.yaml
209 lines (209 loc) · 5.46 KB
/
20-componentconfig-gardenlet.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
---
apiVersion: gardenlet.config.gardener.cloud/v1alpha1
kind: GardenletConfiguration
gardenClientConnection:
qps: 100
burst: 130
# kubeconfigValidity:
# validity: 24h
# autoRotationJitterPercentageMin: 70
# autoRotationJitterPercentageMax: 90
seedClientConnection:
qps: 100
burst: 130
shootClientConnection:
qps: 25
burst: 50
controllers:
bastion:
concurrentSyncs: 20
backupBucket:
concurrentSyncs: 20
backupEntry:
concurrentSyncs: 20
deletionGracePeriodHours: 0
# deletionGracePeriodShootPurposes:
# - production
controllerInstallation:
concurrentSyncs: 20
controllerInstallationCare:
concurrentSyncs: 20
syncPeriod: 30s
controllerInstallationRequired:
concurrentSyncs: 1
networkPolicy:
concurrentSyncs: 5
shoot:
concurrentSyncs: 20
syncPeriod: 1h
retryDuration: 12h
# `respectSyncPeriodOverwrite` specifies whether Shoot owners can
# mark their Shoots ignored (no reconciliation) or change their sync Period.
# respectSyncPeriodOverwrite: true
# `reconcileInMaintenanceOnly` specifies whether Shoot reconciliations
# can only happen during their maintenance time window or not.
# reconcileInMaintenanceOnly: true
# `progressReportPeriod` specifies how often the progress of a shoot operation shall be reported in its status.
# progressReportPeriod: 5s
# dnsEntryTTLSeconds: 120
shootCare:
concurrentSyncs: 5
syncPeriod: 30s
staleExtensionHealthChecks:
enabled: true
# threshold: 5m
managedResourceProgressingThreshold: 1h
conditionThresholds:
- type: APIServerAvailable
duration: 1m
- type: ControlPlaneHealthy
duration: 1m
- type: ObservabilityComponentsHealthy
duration: 1m
- type: SystemComponentsHealthy
duration: 1m
- type: EveryNodeReady
duration: 5m
webhookRemediatorEnabled: false
shootSecret:
concurrentSyncs: 5
shootStateSync:
concurrentSyncs: 1
seed:
syncPeriod: 1h
# leaseResyncSeconds: 2
# leaseResyncMissThreshold: 10
seedCare:
syncPeriod: 30s
conditionThresholds:
- type: SeedSystemComponentsHealthy
duration: 1m
managedSeed:
concurrentSyncs: 5
syncPeriod: 1h
waitSyncPeriod: 15s
syncJitterPeriod: 5m
shootMigration:
concurrentSyncs: 5
syncPeriod: 1m
gracePeriod: 2h
lastOperationStaleDuration: 10m
backupEntryMigration:
concurrentSyncs: 5
syncPeriod: 1m
gracePeriod: 10m
lastOperationStaleDuration: 2m
resources:
capacity:
shoots: 200
leaderElection:
leaderElect: true
leaseDuration: 15s
renewDeadline: 10s
retryPeriod: 2s
resourceLock: leases
resourceNamespace: garden
resourceName: gardenlet-leader-election
logLevel: info
logFormat: text
server:
healthProbes:
bindAddress: 0.0.0.0
port: 2728
metrics:
bindAddress: 0.0.0.0
port: 2729
debugging:
enableProfiling: false
enableContentionProfiling: false
featureGates:
HVPA: true
HVPAForShootedSeed: true
ManagedIstio: true
APIServerSNI: true
CopyEtcdBackupsDuringControlPlaneMigration: true
ForceRestore: false
DefaultSeccompProfile: true
CoreDNSQueryRewriting: true
# seedConfig:
# metadata:
# name: my-seed
# spec:
# <Check out the `spec` in the `50-seed.yaml` file to see what's possible to configure here>
logging:
enabled: true
loki:
enabled: true
shootNodeLogging:
shootPurposes:
- "infrastructure"
- "production"
- "development"
- "evaluation"
# logging:
# enabled: false
# fluentBit:
# networkPolicy:
# additionalEgressIPBlock: # add additional egress IPBlock to allow-fluentbit NetworkPolicy
# - 123.123.123.123/24
# output: |-
# [Output]
# ...
# loki:
# enabled: true
# garden:
# storage: "100Gi"
# shootNodeLogging:
# shootPurposes:
# - "development"
# shootEventLogging:
# enabled: true
# sni: # SNI configuration used for APIServerSNI and ManagedIstio feature gates with default values.
# ingress:
# serviceName: istio-ingress
# namespace: istio-ingress
# serviceExternalIP: 10.8.10.10 # Optional external ip for the ingress gateway load balancer.
# labels:
# istio: ingressgateway
# exposureClassHandlers:
# - name: internet-config
# loadBalancerService:
# annotations:
# loadbalancer/network: internet
# - name: internal-config
# loadBalancerService:
# annotations:
# loadbalancer/network: internal
# sni:
# ingress:
# namespace: ingress-internal
# serviceExternalIP: 10.8.10.11 # Optional external ip for the ingress gateway load balancer.
# labels:
# network: internal
etcdConfig:
etcdController:
workers: 3
custodianController:
workers: 3
backupCompactionController:
workers: 3
enableBackupCompaction: false
eventsThreshold: 1000000
activeDeadlineDuration: "3h"
# backupLeaderElection:
# reelectionPeriod: 5s
# etcdConnectionTimeout: 5s
# monitoring:
# shoot:
# enabled: true
# remoteWrite:
# url: https://remoteWriteUrl # remote write URL
# keep:# metrics that should be forwarded to the external write endpoint. If empty all metrics get forwarded
# - kube_pod_container_info
# queueConfig: | # queue_config of prometheus remote write as multiline string
# max_shards: 100
# batch_send_deadline: 20s
# min_backoff: 500ms
# max_backoff: 60s
# externalLabels: # add additional labels to metrics to identify it on the central instance
# additional: label