2025-09-27 22:55:42 +02:00
|
|
|
kind: Cluster
|
|
|
|
|
apiVersion: kind.x-k8s.io/v1alpha4
|
|
|
|
|
name: bakery-ia-local
|
|
|
|
|
nodes:
|
|
|
|
|
- role: control-plane
|
|
|
|
|
kubeadmConfigPatches:
|
|
|
|
|
- |
|
|
|
|
|
kind: InitConfiguration
|
|
|
|
|
nodeRegistration:
|
|
|
|
|
kubeletExtraArgs:
|
|
|
|
|
node-labels: "ingress-ready=true"
|
2025-10-19 19:22:37 +02:00
|
|
|
- |
|
|
|
|
|
kind: ClusterConfiguration
|
|
|
|
|
apiServer:
|
|
|
|
|
extraArgs:
|
|
|
|
|
encryption-provider-config: /etc/kubernetes/enc/encryption-config.yaml
|
|
|
|
|
extraVolumes:
|
|
|
|
|
- name: encryption-config
|
|
|
|
|
hostPath: /etc/kubernetes/enc
|
|
|
|
|
mountPath: /etc/kubernetes/enc
|
|
|
|
|
readOnly: true
|
|
|
|
|
pathType: DirectoryOrCreate
|
|
|
|
|
extraMounts:
|
|
|
|
|
- hostPath: ./infrastructure/kubernetes/encryption
|
|
|
|
|
containerPath: /etc/kubernetes/enc
|
|
|
|
|
readOnly: true
|
2025-09-27 22:55:42 +02:00
|
|
|
extraPortMappings:
|
2025-09-28 13:54:28 +02:00
|
|
|
# HTTP ingress
|
|
|
|
|
- containerPort: 30080
|
2025-09-27 22:55:42 +02:00
|
|
|
hostPort: 80
|
|
|
|
|
protocol: TCP
|
2025-09-28 13:54:28 +02:00
|
|
|
# HTTPS ingress
|
|
|
|
|
- containerPort: 30443
|
2025-09-27 22:55:42 +02:00
|
|
|
hostPort: 443
|
|
|
|
|
protocol: TCP
|
2025-09-28 13:54:28 +02:00
|
|
|
# Direct frontend access (backup)
|
|
|
|
|
- containerPort: 30300
|
|
|
|
|
hostPort: 3000
|
|
|
|
|
protocol: TCP
|
|
|
|
|
# Direct gateway access (backup)
|
|
|
|
|
- containerPort: 30800
|
|
|
|
|
hostPort: 8000
|
2025-09-27 22:55:42 +02:00
|
|
|
protocol: TCP
|
2025-11-12 15:34:10 +01:00
|
|
|
sysctls:
|
|
|
|
|
# Increase fs.inotify limits to prevent "too many open files" errors
|
|
|
|
|
fs.inotify.max_user_watches: 524288
|
|
|
|
|
fs.inotify.max_user_instances: 256
|
|
|
|
|
fs.inotify.max_queued_events: 32768
|
