Kubernetes Api Server Customization

WARNING - Kubernetes API Server Customization

Please contact Platform9 Support prior to changing any API Server, Controller or Scheduler flags. Creating or updating clusters with unknown, incorrect or unsupported flags may result in cluster outages and dataloss.

As of Platform9 5.2 PMK is supports customizing Kubernetes API flags at the time of cluster creation. Customizing API flags is an advanced feature that should not be used in production environments without prior consultation with Platform9 Support.

Reserved API Server Flags

The following are reserved API Server flags

Bash

kube-apiserver"
        - "--allow-privileged=_ "
        - "--anonymous-auth= "
        - "--authentication-token-webhook-cache-ttl=__ "
        - "--authentication-token-webhook-config-file=_ "
        - "--authorization-mode= "
        - "--bind-address= "
        - "--client-ca-file= "
        - "--cloud-provider= "
        - "--etcd-servers= "
        - "--runtime-config=_ "
        - "--secure-port= "
        - "--service-account-issuer= "
        - "--service-account-key-file=/ "
        - "--service-account-signing-key-file=/ "
        - "--service-cluster-ip-range= "
        - "--storage-backend= "
        - "--storage-media-type= "
        - "--tls-cert-file="
        - "--tls-private-key-file= "
        - "--tls-cipher-suites= "
        - "--requestheader-client-ca-file= "
        - "--requestheader-allowed-names= "
        - "--requestheader-extra-headers-prefix= "
        - "--requestheader-group-headers= "
        - "--requestheader-username-headers= "
        - "--proxy-client-cert-file= "
        - "--proxy-client-key-file= "
        - "--kubelet-client-certificate= "
        - "--kubelet-client-key= "
        - "--v= "
        - "--http2-max-streams-per-connection="

Reserved Controller Flags

The following are reserved controller flags

Bash

kube-controller-manager"
        - "--cloud-provider= "
        - "--kubeconfig= "
        - "--leader-elect= "
        - "--root-ca-file= "
        - "--service-account-private-key-file= "
        - "--v=_ _"
        - "--horizontal-pod-autoscaler-use-rest-clients= "
        - "--use-service-account-credentials= "

Reserved Scheduler Flags

the following are reserved scheduler flags

Bash

kube-scheduler"
        - "--config= "
        - "--leader-elect= "
        - "--v= "