Clean up KubeletConfiguration and remove wrongly defaulted values (#411)

Signed-off-by: Waleed Malik <[email protected]>
kubermatic · Aug 22, 2024 · 0a60c8b · 0a60c8b
1 parent d21723f
commit 0a60c8b
Show file tree

Hide file tree

Showing 24 changed files with 123 additions and 417 deletions.
diff --git a/deploy/osps/default/osp-amzn2.yaml b/deploy/osps/default/osp-amzn2.yaml
@@ -699,15 +699,15 @@ spec:
                 anonymous:
                   enabled: false
                 webhook:
-                  cacheTTL: 0s
+                  cacheTTL: 2m
                   enabled: true
                 x509:
                   clientCAFile: /etc/kubernetes/pki/ca.crt
               authorization:
                 mode: Webhook
                 webhook:
-                  cacheAuthorizedTTL: 0s
-                  cacheUnauthorizedTTL: 0s
+                  cacheAuthorizedTTL: 5m0s
+                  cacheUnauthorizedTTL: 30s
               cgroupDriver: systemd
               clusterDNS:
               {{- range .ClusterDNSIPs }}
@@ -724,36 +724,17 @@ spec:
               {{- else }}
               containerLogMaxFiles: 5
               {{- end }}
-              cpuManagerReconcilePeriod: 0s
-              evictionPressureTransitionPeriod: 0s
               featureGates:
               {{- if .KubeletFeatureGates -}}
                 {{ range $key, $val := .KubeletFeatureGates }}
                 {{ $key }}: {{ $val }}
                 {{- end -}}
               {{- end }}
-              fileCheckFrequency: 0s
-              httpCheckFrequency: 0s
-              imageMinimumGCAge: 0s
-              logging:
-                flushFrequency: 0
-                options:
-                  json:
-                    infoBufferSize: "0"
-                verbosity: 0
-              memorySwap: {}
-              nodeStatusReportFrequency: 0s
-              nodeStatusUpdateFrequency: 0s
               protectKernelDefaults: true
               readOnlyPort: 0
               rotateCertificates: true
-              runtimeRequestTimeout: 0s
               serverTLSBootstrap: true
-              shutdownGracePeriod: 0s
-              shutdownGracePeriodCriticalPods: 0s
               staticPodPath: /etc/kubernetes/manifests
-              streamingConnectionIdleTimeout: 0s
-              syncFrequency: 0s
               # Enable parallel image pulling.
               serializeImagePulls: false
               # Set max parallel image pulls to 10.
@@ -803,7 +784,7 @@ spec:
               - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
               - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
               volumePluginDir: /var/lib/kubelet/volumeplugins
-              volumeStatsAggPeriod: 0s
+              resolvConf: /run/systemd/resolve/resolv.conf
 
       - path: /etc/systemd/system/kubelet-healthcheck.service
         permissions: 644

diff --git a/deploy/osps/default/osp-centos.yaml b/deploy/osps/default/osp-centos.yaml
@@ -734,15 +734,15 @@ spec:
                 anonymous:
                   enabled: false
                 webhook:
-                  cacheTTL: 0s
+                  cacheTTL: 2m
                   enabled: true
                 x509:
                   clientCAFile: /etc/kubernetes/pki/ca.crt
               authorization:
                 mode: Webhook
                 webhook:
-                  cacheAuthorizedTTL: 0s
-                  cacheUnauthorizedTTL: 0s
+                  cacheAuthorizedTTL: 5m0s
+                  cacheUnauthorizedTTL: 30s
               cgroupDriver: systemd
               clusterDNS:
               {{- range .ClusterDNSIPs }}
@@ -759,36 +759,17 @@ spec:
               {{- else }}
               containerLogMaxFiles: 5
               {{- end }}
-              cpuManagerReconcilePeriod: 0s
-              evictionPressureTransitionPeriod: 0s
               featureGates:
               {{- if .KubeletFeatureGates -}}
                 {{ range $key, $val := .KubeletFeatureGates }}
                 {{ $key }}: {{ $val }}
                 {{- end -}}
               {{- end }}
-              fileCheckFrequency: 0s
-              httpCheckFrequency: 0s
-              imageMinimumGCAge: 0s
-              logging:
-                flushFrequency: 0
-                options:
-                  json:
-                    infoBufferSize: "0"
-                verbosity: 0
-              memorySwap: {}
-              nodeStatusReportFrequency: 0s
-              nodeStatusUpdateFrequency: 0s
               protectKernelDefaults: true
               readOnlyPort: 0
               rotateCertificates: true
-              runtimeRequestTimeout: 0s
               serverTLSBootstrap: true
-              shutdownGracePeriod: 0s
-              shutdownGracePeriodCriticalPods: 0s
               staticPodPath: /etc/kubernetes/manifests
-              streamingConnectionIdleTimeout: 0s
-              syncFrequency: 0s
               # Enable parallel image pulling.
               serializeImagePulls: false
               # Set max parallel image pulls to 10.
@@ -838,7 +819,7 @@ spec:
               - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
               - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
               volumePluginDir: /var/lib/kubelet/volumeplugins
-              volumeStatsAggPeriod: 0s
+              resolvConf: /run/systemd/resolve/resolv.conf
 
       - path: /etc/systemd/system/kubelet-healthcheck.service
         permissions: 644

diff --git a/deploy/osps/default/osp-flatcar-cloud-init.yaml b/deploy/osps/default/osp-flatcar-cloud-init.yaml
@@ -642,15 +642,15 @@ spec:
                 anonymous:
                   enabled: false
                 webhook:
-                  cacheTTL: 0s
+                  cacheTTL: 2m
                   enabled: true
                 x509:
                   clientCAFile: /etc/kubernetes/pki/ca.crt
               authorization:
                 mode: Webhook
                 webhook:
-                  cacheAuthorizedTTL: 0s
-                  cacheUnauthorizedTTL: 0s
+                  cacheAuthorizedTTL: 5m0s
+                  cacheUnauthorizedTTL: 30s
               cgroupDriver: systemd
               clusterDNS:
               {{- range .ClusterDNSIPs }}
@@ -667,36 +667,17 @@ spec:
               {{- else }}
               containerLogMaxFiles: 5
               {{- end }}
-              cpuManagerReconcilePeriod: 0s
-              evictionPressureTransitionPeriod: 0s
               featureGates:
               {{- if .KubeletFeatureGates -}}
                 {{ range $key, $val := .KubeletFeatureGates }}
                 {{ $key }}: {{ $val }}
                 {{- end -}}
               {{- end }}
-              fileCheckFrequency: 0s
-              httpCheckFrequency: 0s
-              imageMinimumGCAge: 0s
-              logging:
-                flushFrequency: 0
-                options:
-                  json:
-                    infoBufferSize: "0"
-                verbosity: 0
-              memorySwap: {}
-              nodeStatusReportFrequency: 0s
-              nodeStatusUpdateFrequency: 0s
               protectKernelDefaults: true
               readOnlyPort: 0
               rotateCertificates: true
-              runtimeRequestTimeout: 0s
               serverTLSBootstrap: true
-              shutdownGracePeriod: 0s
-              shutdownGracePeriodCriticalPods: 0s
               staticPodPath: /etc/kubernetes/manifests
-              streamingConnectionIdleTimeout: 0s
-              syncFrequency: 0s
               # Enable parallel image pulling.
               serializeImagePulls: false
               # Set max parallel image pulls to 10.
@@ -746,7 +727,6 @@ spec:
               - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
               - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
               volumePluginDir: /var/lib/kubelet/volumeplugins
-              volumeStatsAggPeriod: 0s
               resolvConf: /run/systemd/resolve/resolv.conf
 
       - path: /etc/systemd/system/kubelet-healthcheck.service

diff --git a/deploy/osps/default/osp-flatcar.yaml b/deploy/osps/default/osp-flatcar.yaml
@@ -732,15 +732,15 @@ spec:
                 anonymous:
                   enabled: false
                 webhook:
-                  cacheTTL: 0s
+                  cacheTTL: 2m
                   enabled: true
                 x509:
                   clientCAFile: /etc/kubernetes/pki/ca.crt
               authorization:
                 mode: Webhook
                 webhook:
-                  cacheAuthorizedTTL: 0s
-                  cacheUnauthorizedTTL: 0s
+                  cacheAuthorizedTTL: 5m0s
+                  cacheUnauthorizedTTL: 30s
               cgroupDriver: systemd
               clusterDNS:
               {{- range .ClusterDNSIPs }}
@@ -757,36 +757,17 @@ spec:
               {{- else }}
               containerLogMaxFiles: 5
               {{- end }}
-              cpuManagerReconcilePeriod: 0s
-              evictionPressureTransitionPeriod: 0s
               featureGates:
               {{- if .KubeletFeatureGates -}}
                 {{ range $key, $val := .KubeletFeatureGates }}
                 {{ $key }}: {{ $val }}
                 {{- end -}}
               {{- end }}
-              fileCheckFrequency: 0s
-              httpCheckFrequency: 0s
-              imageMinimumGCAge: 0s
-              logging:
-                flushFrequency: 0
-                options:
-                  json:
-                    infoBufferSize: "0"
-                verbosity: 0
-              memorySwap: {}
-              nodeStatusReportFrequency: 0s
-              nodeStatusUpdateFrequency: 0s
               protectKernelDefaults: true
               readOnlyPort: 0
               rotateCertificates: true
-              runtimeRequestTimeout: 0s
               serverTLSBootstrap: true
-              shutdownGracePeriod: 0s
-              shutdownGracePeriodCriticalPods: 0s
               staticPodPath: /etc/kubernetes/manifests
-              streamingConnectionIdleTimeout: 0s
-              syncFrequency: 0s
               # Enable parallel image pulling.
               serializeImagePulls: false
               # Set max parallel image pulls to 10.
@@ -836,7 +817,6 @@ spec:
               - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
               - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
               volumePluginDir: /var/lib/kubelet/volumeplugins
-              volumeStatsAggPeriod: 0s
               resolvConf: /run/systemd/resolve/resolv.conf
 
       - path: /etc/systemd/system/kubelet-healthcheck.service

diff --git a/deploy/osps/default/osp-rhel.yaml b/deploy/osps/default/osp-rhel.yaml
@@ -737,15 +737,15 @@ spec:
                 anonymous:
                   enabled: false
                 webhook:
-                  cacheTTL: 0s
+                  cacheTTL: 2m
                   enabled: true
                 x509:
                   clientCAFile: /etc/kubernetes/pki/ca.crt
               authorization:
                 mode: Webhook
                 webhook:
-                  cacheAuthorizedTTL: 0s
-                  cacheUnauthorizedTTL: 0s
+                  cacheAuthorizedTTL: 5m0s
+                  cacheUnauthorizedTTL: 30s
               cgroupDriver: systemd
               clusterDNS:
               {{- range .ClusterDNSIPs }}
@@ -762,36 +762,17 @@ spec:
               {{- else }}
               containerLogMaxFiles: 5
               {{- end }}
-              cpuManagerReconcilePeriod: 0s
-              evictionPressureTransitionPeriod: 0s
               featureGates:
               {{- if .KubeletFeatureGates -}}
                 {{ range $key, $val := .KubeletFeatureGates }}
                 {{ $key }}: {{ $val }}
                 {{- end -}}
               {{- end }}
-              fileCheckFrequency: 0s
-              httpCheckFrequency: 0s
-              imageMinimumGCAge: 0s
-              logging:
-                flushFrequency: 0
-                options:
-                  json:
-                    infoBufferSize: "0"
-                verbosity: 0
-              memorySwap: {}
-              nodeStatusReportFrequency: 0s
-              nodeStatusUpdateFrequency: 0s
               protectKernelDefaults: true
               readOnlyPort: 0
               rotateCertificates: true
-              runtimeRequestTimeout: 0s
               serverTLSBootstrap: true
-              shutdownGracePeriod: 0s
-              shutdownGracePeriodCriticalPods: 0s
               staticPodPath: /etc/kubernetes/manifests
-              streamingConnectionIdleTimeout: 0s
-              syncFrequency: 0s
               # Enable parallel image pulling.
               serializeImagePulls: false
               # Set max parallel image pulls to 10.
@@ -841,7 +822,7 @@ spec:
               - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
               - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
               volumePluginDir: /var/lib/kubelet/volumeplugins
-              volumeStatsAggPeriod: 0s
+              resolvConf: /run/systemd/resolve/resolv.conf
 
       - path: /etc/systemd/system/kubelet-healthcheck.service
         permissions: 644

diff --git a/deploy/osps/default/osp-rockylinux.yaml b/deploy/osps/default/osp-rockylinux.yaml
@@ -741,15 +741,15 @@ spec:
                 anonymous:
                   enabled: false
                 webhook:
-                  cacheTTL: 0s
+                  cacheTTL: 2m
                   enabled: true
                 x509:
                   clientCAFile: /etc/kubernetes/pki/ca.crt
               authorization:
                 mode: Webhook
                 webhook:
-                  cacheAuthorizedTTL: 0s
-                  cacheUnauthorizedTTL: 0s
+                  cacheAuthorizedTTL: 5m0s
+                  cacheUnauthorizedTTL: 30s
               cgroupDriver: systemd
               clusterDNS:
               {{- range .ClusterDNSIPs }}
@@ -766,36 +766,17 @@ spec:
               {{- else }}
               containerLogMaxFiles: 5
               {{- end }}
-              cpuManagerReconcilePeriod: 0s
-              evictionPressureTransitionPeriod: 0s
               featureGates:
               {{- if .KubeletFeatureGates -}}
                 {{ range $key, $val := .KubeletFeatureGates }}
                 {{ $key }}: {{ $val }}
                 {{- end -}}
               {{- end }}
-              fileCheckFrequency: 0s
-              httpCheckFrequency: 0s
-              imageMinimumGCAge: 0s
-              logging:
-                flushFrequency: 0
-                options:
-                  json:
-                    infoBufferSize: "0"
-                verbosity: 0
-              memorySwap: {}
-              nodeStatusReportFrequency: 0s
-              nodeStatusUpdateFrequency: 0s
               protectKernelDefaults: true
               readOnlyPort: 0
               rotateCertificates: true
-              runtimeRequestTimeout: 0s
               serverTLSBootstrap: true
-              shutdownGracePeriod: 0s
-              shutdownGracePeriodCriticalPods: 0s
               staticPodPath: /etc/kubernetes/manifests
-              streamingConnectionIdleTimeout: 0s
-              syncFrequency: 0s
               # Enable parallel image pulling.
               serializeImagePulls: false
               # Set max parallel image pulls to 10.
@@ -845,7 +826,7 @@ spec:
               - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
               - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
               volumePluginDir: /var/lib/kubelet/volumeplugins
-              volumeStatsAggPeriod: 0s
+              resolvConf: /run/systemd/resolve/resolv.conf
 
       - path: /etc/systemd/system/kubelet-healthcheck.service
         permissions: 644