mode: 0644
path: "/etc/kubernetes/kubelet.conf"
contents:
  inline: |
    kind: KubeletConfiguration
    apiVersion: kubelet.config.k8s.io/v1beta1
    authentication:
      x509:
        clientCAFile: /etc/kubernetes/kubelet-ca.crt
      anonymous:
        enabled: false
    cgroupDriver: systemd
    cgroupRoot: /
    clusterDNS:
      - {{.ClusterDNSIP}}
    clusterDomain: cluster.local
    containerLogMaxSize: 50Mi
    maxPods: 250
    kubeAPIQPS: 50
    kubeAPIBurst: 100
    rotateCertificates: true
    serializeImagePulls: false
    staticPodPath: /etc/kubernetes/manifests
    systemCgroups: /system.slice
    systemReserved:
      cpu: 500m
      memory: 1Gi
      ephemeral-storage: 1Gi
    featureGates:
      APIPriorityAndFairness: true
{{- if eq .IPFamilies "DualStack"}}
      IPv6DualStack: true
{{- end}}
      LegacyNodeRoleBehavior: false
      # Will be removed in future openshift/api update https://github.com/openshift/api/commit/c8c8f6d0f4a8ac4ff4ad7d1a84b27e1aa7ebf9b4
      RemoveSelfLink: false
      NodeDisruptionExclusion: true
      RotateKubeletServerCertificate: true
      SCTPSupport: true
      ServiceNodeExclusion: true
      SupportPodPidsLimit: true
    serverTLSBootstrap: true
