87 lines
3.3 KiB
YAML
87 lines
3.3 KiB
YAML
"options":
|
|
"enable-cgroups":
|
|
"type": "boolean"
|
|
"default": !!bool "false"
|
|
"description": |
|
|
Enable GRUB cgroup overrides cgroup_enable=memory swapaccount=1. WARNING
|
|
changing this option will reboot the host - use with caution on production
|
|
services.
|
|
"disable-juju-proxy":
|
|
"type": "boolean"
|
|
"default": !!bool "false"
|
|
"description": |
|
|
Ignore juju-http(s) proxy settings on this charm.
|
|
If set to true, all juju https proxy settings will be ignored
|
|
"custom-registry-ca":
|
|
"type": "string"
|
|
"default": ""
|
|
"description": |
|
|
Base64 encoded Certificate Authority (CA) bundle. Setting this config
|
|
allows container runtimes to pull images from registries with TLS
|
|
certificates signed by an external CA.
|
|
"custom_registries":
|
|
"type": "string"
|
|
"default": "[]"
|
|
"description": |
|
|
Registry endpoints and credentials. Setting this config allows Kubelet
|
|
to pull images from registries where auth is required.
|
|
|
|
The value for this config must be a JSON array of credential objects, like this:
|
|
[{"host": "my.registry:port", "username": "user", "password": "pass"}]
|
|
|
|
`host` could be registry host address, e.g.: myregistry.io:9000, 10.10.10.10:5432.
|
|
or a name, e.g.: myregistry.io, myregistry.
|
|
It will be derived from `url` if not provided, e.g.:
|
|
url: http://10.10.10.10:8000 --> host: 10.10.10.10:8000
|
|
|
|
If required, you can supply credentials with option keys 'username' and 'password',
|
|
or 'ca_file', 'cert_file', and 'key_file' for ssl/tls communication,
|
|
which should be base64 encoded file contents in string form
|
|
|
|
"ca_file": "'"$(base64 -w 0 < my.custom.registry.pem)"'"
|
|
|
|
example config)
|
|
juju config containerd custom_registries='[{
|
|
"url": "https://registry.example.com",
|
|
"ca_file": "'"$(base64 -w 0 < ~/my.custom.ca.pem)"'",
|
|
"cert_file": "'"$(base64 -w 0 < ~/my.custom.cert.pem)"'",
|
|
"key_file": "'"$(base64 -w 0 < ~/my.custom.key.pem)"'",
|
|
}]'
|
|
"gpu_driver":
|
|
"type": "string"
|
|
"default": "auto"
|
|
"description": |
|
|
Override GPU driver installation. Options are "auto", "nvidia", "none".
|
|
"runtime":
|
|
"type": "string"
|
|
"default": "auto"
|
|
"description": |
|
|
Set a custom containerd runtime. Set "auto" to select based on hardware.
|
|
"shim":
|
|
"type": "string"
|
|
"default": "containerd-shim"
|
|
"description": |
|
|
Set a custom containerd shim.
|
|
"http_proxy":
|
|
"type": "string"
|
|
"default": ""
|
|
"description": |
|
|
URL to use for HTTP_PROXY to be used by Containerd. Useful in
|
|
egress-filtered environments where a proxy is the only option for
|
|
accessing the registry to pull images.
|
|
"https_proxy":
|
|
"type": "string"
|
|
"default": ""
|
|
"description": |
|
|
URL to use for HTTPS_PROXY to be used by Containerd. Useful in
|
|
egress-filtered environments where a proxy is the only option for
|
|
accessing the registry to pull images.
|
|
"no_proxy":
|
|
"type": "string"
|
|
"default": ""
|
|
"description": |
|
|
Comma-separated list of destinations (either domain names or IP
|
|
addresses) which should be accessed directly, rather than through
|
|
the proxy defined in http_proxy or https_proxy. Must be less than
|
|
2023 characters long.
|