mirror of
https://github.com/k3s-io/k3s.git
synced 2024-06-07 19:41:36 +00:00
c45524e662
Render cri registry mirrors.x.endpoints and configs.x.tls into config_path; keep using mirrors.x.rewrites and configs.x.auth those do not yet have an equivalent in the new format. The new config file format allows disabling containerd's fallback to the default endpoint when using mirror endpoints; a new CLI flag is added to control that behavior. This also re-shares some code that was unnecessarily split into parallel implementations for linux/windows versions. There is probably more work to be done on this front but it's a good start. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
159 lines
4.7 KiB
Go
159 lines
4.7 KiB
Go
//go:build windows
|
|
// +build windows
|
|
|
|
package templates
|
|
|
|
import (
|
|
"net/url"
|
|
"strings"
|
|
"text/template"
|
|
)
|
|
|
|
const ContainerdConfigTemplate = `
|
|
{{- /* */ -}}
|
|
# File generated by {{ .Program }}. DO NOT EDIT. Use config.toml.tmpl instead.
|
|
version = 2
|
|
root = {{ printf "%q" .NodeConfig.Containerd.Root }}
|
|
state = {{ printf "%q" .NodeConfig.Containerd.State }}
|
|
plugin_dir = ""
|
|
disabled_plugins = []
|
|
required_plugins = []
|
|
oom_score = 0
|
|
|
|
[grpc]
|
|
address = "{{ deschemify .NodeConfig.Containerd.Address }}"
|
|
tcp_address = ""
|
|
tcp_tls_cert = ""
|
|
tcp_tls_key = ""
|
|
uid = 0
|
|
gid = 0
|
|
max_recv_message_size = 16777216
|
|
max_send_message_size = 16777216
|
|
|
|
[ttrpc]
|
|
address = ""
|
|
uid = 0
|
|
gid = 0
|
|
|
|
[debug]
|
|
address = ""
|
|
uid = 0
|
|
gid = 0
|
|
level = ""
|
|
|
|
[metrics]
|
|
address = ""
|
|
grpc_histogram = false
|
|
|
|
[cgroup]
|
|
path = ""
|
|
|
|
[timeouts]
|
|
"io.containerd.timeout.shim.cleanup" = "5s"
|
|
"io.containerd.timeout.shim.load" = "5s"
|
|
"io.containerd.timeout.shim.shutdown" = "3s"
|
|
"io.containerd.timeout.task.state" = "2s"
|
|
|
|
[plugins]
|
|
[plugins."io.containerd.gc.v1.scheduler"]
|
|
pause_threshold = 0.02
|
|
deletion_threshold = 0
|
|
mutation_threshold = 100
|
|
schedule_delay = "0s"
|
|
startup_delay = "100ms"
|
|
[plugins."io.containerd.grpc.v1.cri"]
|
|
disable_tcp_service = true
|
|
stream_server_address = "127.0.0.1"
|
|
stream_server_port = "0"
|
|
stream_idle_timeout = "4h0m0s"
|
|
enable_selinux = false
|
|
selinux_category_range = 0
|
|
sandbox_image = "{{ .NodeConfig.AgentConfig.PauseImage }}"
|
|
stats_collect_period = 10
|
|
systemd_cgroup = false
|
|
enable_tls_streaming = false
|
|
max_container_log_line_size = 16384
|
|
disable_cgroup = false
|
|
disable_apparmor = false
|
|
restrict_oom_score_adj = false
|
|
max_concurrent_downloads = 3
|
|
disable_proc_mount = false
|
|
unset_seccomp_profile = ""
|
|
tolerate_missing_hugetlb_controller = false
|
|
disable_hugetlb_controller = false
|
|
ignore_image_defined_volumes = false
|
|
[plugins."io.containerd.grpc.v1.cri".containerd]
|
|
snapshotter = "windows"
|
|
default_runtime_name = "runhcs-wcow-process"
|
|
no_pivot = false
|
|
disable_snapshot_annotations = false
|
|
discard_unpacked_layers = false
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.default_runtime]
|
|
runtime_type = ""
|
|
runtime_engine = ""
|
|
runtime_root = ""
|
|
privileged_without_host_devices = false
|
|
base_runtime_spec = ""
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.untrusted_workload_runtime]
|
|
runtime_type = ""
|
|
runtime_engine = ""
|
|
runtime_root = ""
|
|
privileged_without_host_devices = false
|
|
base_runtime_spec = ""
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes]
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runhcs-wcow-process]
|
|
runtime_type = "io.containerd.runhcs.v1"
|
|
runtime_engine = ""
|
|
runtime_root = ""
|
|
privileged_without_host_devices = false
|
|
base_runtime_spec = ""
|
|
[plugins."io.containerd.grpc.v1.cri".cni]
|
|
bin_dir = {{ printf "%q" .NodeConfig.AgentConfig.CNIBinDir }}
|
|
conf_dir = {{ printf "%q" .NodeConfig.AgentConfig.CNIConfDir }}
|
|
max_conf_num = 1
|
|
conf_template = ""
|
|
[plugins."io.containerd.grpc.v1.cri".registry]
|
|
config_path = {{ printf "%q" .NodeConfig.Containerd.Registry }}
|
|
|
|
{{ if .PrivateRegistryConfig }}
|
|
{{range $k, $v := .PrivateRegistryConfig.Configs }}
|
|
{{ if $v.Auth }}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.configs.auth."{{$k}}"]
|
|
{{ if $v.Auth.Username }}username = {{ printf "%q" $v.Auth.Username }}{{end}}
|
|
{{ if $v.Auth.Password }}password = {{ printf "%q" $v.Auth.Password }}{{end}}
|
|
{{ if $v.Auth.Auth }}auth = {{ printf "%q" $v.Auth.Auth }}{{end}}
|
|
{{ if $v.Auth.IdentityToken }}identitytoken = {{ printf "%q" $v.Auth.IdentityToken }}{{end}}
|
|
{{end}}
|
|
{{end}}
|
|
{{end}}
|
|
[plugins."io.containerd.grpc.v1.cri".image_decryption]
|
|
key_model = ""
|
|
[plugins."io.containerd.grpc.v1.cri".x509_key_pair_streaming]
|
|
tls_cert_file = ""
|
|
tls_key_file = ""
|
|
[plugins."io.containerd.internal.v1.opt"]
|
|
path = {{ printf "%q" .NodeConfig.Containerd.Opt }}
|
|
[plugins."io.containerd.internal.v1.restart"]
|
|
interval = "10s"
|
|
[plugins."io.containerd.metadata.v1.bolt"]
|
|
content_sharing_policy = "shared"
|
|
[plugins."io.containerd.runtime.v2.task"]
|
|
platforms = ["windows/amd64", "linux/amd64"]
|
|
[plugins."io.containerd.service.v1.diff-service"]
|
|
default = ["windows", "windows-lcow"]
|
|
`
|
|
|
|
// Windows config templates need named pipe addresses fixed up
|
|
var templateFuncs = template.FuncMap{
|
|
"deschemify": func(s string) string {
|
|
if strings.HasPrefix(s, "npipe:") {
|
|
u, err := url.Parse(s)
|
|
if err != nil {
|
|
return ""
|
|
}
|
|
return u.Path
|
|
}
|
|
return s
|
|
},
|
|
}
|