bloomberg/kubernetes-cluster-cookbook

View on GitHub
templates/default/etcd-etcd.erb

Summary

Maintainability
Test Coverage
# File created by Chef! Any local changes will be overwritten next Chef run!

ETCD_NAME="<%= @etcd_client_name %>"
ETCD_DATA_DIR="<%= @etcd_base_dir %>/<%= @etcd_client_name %>.etcd"
ETCD_INITIAL_CLUSTER_STATE="new"
ETCD_INITIAL_CLUSTER_TOKEN="<%= @etcd_client_token %>"

<% if node['kubernetes']['secure']['enabled'] == 'false' -%>
ETCD_LISTEN_CLIENT_URLS="http://<%= @etcd_client_name %>:<%= @etcd_client_port %>,http://127.0.0.1:<%= @etcd_client_port %>"
ETCD_LISTEN_PEER_URLS="http://<%= @etcd_client_name %>:<%= @etcd_peer_port %>,http://127.0.0.1:<%= @etcd_peer_port %>"
ETCD_ADVERTISE_CLIENT_URLS="http://<%= @etcd_client_name %>:<%= @etcd_client_port %>"
ETCD_INITIAL_CLUSTER="<% @etcd_members.each do |name| %><%= name %>=http://<%= name %>:<%= @etcd_peer_port %>,<% end -%>"
ETCD_INITIAL_ADVERTISE_PEER_URLS="http://<%= @etcd_client_name %>:<%= @etcd_peer_port %>"
<% end -%>

# Secure ETCD configuration parameters go under here when node['kubernetes']['secure']['enabled'] == 'true'
<% if node['kubernetes']['secure']['enabled'] == 'true' -%>
ETCD_LISTEN_CLIENT_URLS="https://<%= @etcd_client_name %>:<%= @etcd_client_port %>,https://127.0.0.1:<%= @etcd_client_port %>"
ETCD_LISTEN_PEER_URLS="https://<%= @etcd_client_name %>:<%= @etcd_peer_port %>,https://127.0.0.1:<%= @etcd_peer_port %>"
ETCD_INITIAL_CLUSTER="<% @etcd_members.each do |name| %><%= name %>=https://<%= name %>:<%= @etcd_peer_port %>,<% end -%>"
ETCD_ADVERTISE_CLIENT_URLS="https://<%= @etcd_client_name %>:<%= @etcd_client_port %>"
ETCD_INITIAL_ADVERTISE_PEER_URLS="https://<%= @etcd_client_name %>:<%= @etcd_peer_port %>"
ETCD_PEER_CLIENT_CERT_AUTH="true"
ETCD_CLIENT_CERT_AUTH="true"
ETCD_CERT_FILE="<%= @etcd_cert_dir %>/client.srv.crt"
ETCD_KEY_FILE="<%= @etcd_cert_dir %>/client.srv.key"
ETCD_TRUSTED_CA_FILE="<%= @etcd_cert_dir %>/client.ca.crt"
ETCD_PEER_CA_FILE="<%= @etcd_cert_dir %>/peer.ca.crt"
ETCD_PEER_CERT_FILE="<%= @etcd_cert_dir %>/peer.srv.crt"
ETCD_PEER_KEY_FILE="<%= @etcd_cert_dir %>/peer.srv.key"
<% end -%>