mirror of https://github.com/k3s-io/k3s
186 lines
5.9 KiB
Go
186 lines
5.9 KiB
Go
// +build windows
|
|
|
|
package templates
|
|
|
|
import (
|
|
"bytes"
|
|
"net/url"
|
|
"strings"
|
|
"text/template"
|
|
)
|
|
|
|
const ContainerdConfigTemplate = `
|
|
version = 2
|
|
root = "{{ replace .NodeConfig.Containerd.Root }}"
|
|
state = "{{ replace .NodeConfig.Containerd.State }}"
|
|
plugin_dir = ""
|
|
disabled_plugins = []
|
|
required_plugins = []
|
|
oom_score = 0
|
|
|
|
[grpc]
|
|
address = "{{ deschemify .NodeConfig.Containerd.Address }}"
|
|
tcp_address = ""
|
|
tcp_tls_cert = ""
|
|
tcp_tls_key = ""
|
|
uid = 0
|
|
gid = 0
|
|
max_recv_message_size = 16777216
|
|
max_send_message_size = 16777216
|
|
|
|
[ttrpc]
|
|
address = ""
|
|
uid = 0
|
|
gid = 0
|
|
|
|
[debug]
|
|
address = ""
|
|
uid = 0
|
|
gid = 0
|
|
level = ""
|
|
|
|
[metrics]
|
|
address = ""
|
|
grpc_histogram = false
|
|
|
|
[cgroup]
|
|
path = ""
|
|
|
|
[timeouts]
|
|
"io.containerd.timeout.shim.cleanup" = "5s"
|
|
"io.containerd.timeout.shim.load" = "5s"
|
|
"io.containerd.timeout.shim.shutdown" = "3s"
|
|
"io.containerd.timeout.task.state" = "2s"
|
|
|
|
[plugins]
|
|
[plugins."io.containerd.gc.v1.scheduler"]
|
|
pause_threshold = 0.02
|
|
deletion_threshold = 0
|
|
mutation_threshold = 100
|
|
schedule_delay = "0s"
|
|
startup_delay = "100ms"
|
|
[plugins."io.containerd.grpc.v1.cri"]
|
|
disable_tcp_service = true
|
|
stream_server_address = "127.0.0.1"
|
|
stream_server_port = "0"
|
|
stream_idle_timeout = "4h0m0s"
|
|
enable_selinux = false
|
|
selinux_category_range = 0
|
|
sandbox_image = "{{ .NodeConfig.AgentConfig.PauseImage }}"
|
|
stats_collect_period = 10
|
|
systemd_cgroup = false
|
|
enable_tls_streaming = false
|
|
max_container_log_line_size = 16384
|
|
disable_cgroup = false
|
|
disable_apparmor = false
|
|
restrict_oom_score_adj = false
|
|
max_concurrent_downloads = 3
|
|
disable_proc_mount = false
|
|
unset_seccomp_profile = ""
|
|
tolerate_missing_hugetlb_controller = false
|
|
disable_hugetlb_controller = false
|
|
ignore_image_defined_volumes = false
|
|
[plugins."io.containerd.grpc.v1.cri".containerd]
|
|
snapshotter = "windows"
|
|
default_runtime_name = "runhcs-wcow-process"
|
|
no_pivot = false
|
|
disable_snapshot_annotations = false
|
|
discard_unpacked_layers = false
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.default_runtime]
|
|
runtime_type = ""
|
|
runtime_engine = ""
|
|
runtime_root = ""
|
|
privileged_without_host_devices = false
|
|
base_runtime_spec = ""
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.untrusted_workload_runtime]
|
|
runtime_type = ""
|
|
runtime_engine = ""
|
|
runtime_root = ""
|
|
privileged_without_host_devices = false
|
|
base_runtime_spec = ""
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes]
|
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runhcs-wcow-process]
|
|
runtime_type = "io.containerd.runhcs.v1"
|
|
runtime_engine = ""
|
|
runtime_root = ""
|
|
privileged_without_host_devices = false
|
|
base_runtime_spec = ""
|
|
[plugins."io.containerd.grpc.v1.cri".cni]
|
|
bin_dir = "{{ replace .NodeConfig.AgentConfig.CNIBinDir }}"
|
|
conf_dir = "{{ replace .NodeConfig.AgentConfig.CNIConfDir }}"
|
|
max_conf_num = 1
|
|
conf_template = ""
|
|
[plugins."io.containerd.grpc.v1.cri".registry]
|
|
config_path = ""
|
|
{{range $k, $v := .PrivateRegistryConfig.Configs }}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.auths]
|
|
{{ if $v.Auth }}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.configs.auth."{{$k}}"]
|
|
{{ if $v.Auth.Username }}username = {{ printf "%q" $v.Auth.Username }}{{end}}
|
|
{{ if $v.Auth.Password }}password = {{ printf "%q" $v.Auth.Password }}{{end}}
|
|
{{ if $v.Auth.Auth }}auth = {{ printf "%q" $v.Auth.Auth }}{{end}}
|
|
{{ if $v.Auth.IdentityToken }}identitytoken = {{ printf "%q" $v.Auth.IdentityToken }}{{end}}
|
|
{{end}}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.configs]
|
|
{{ if $v.TLS }}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.configs.tls."{{$k}}"]
|
|
{{ if $v.TLS.CAFile }}ca_file = "{{ $v.TLS.CAFile }}"{{end}}
|
|
{{ if $v.TLS.CertFile }}cert_file = "{{ $v.TLS.CertFile }}"{{end}}
|
|
{{ if $v.TLS.KeyFile }}key_file = "{{ $v.TLS.KeyFile }}"{{end}}
|
|
{{ if $v.TLS.InsecureSkipVerify }}insecure_skip_verify = true{{end}}
|
|
{{end}}
|
|
{{end}}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
|
|
{{ if .PrivateRegistryConfig.Mirrors }}
|
|
{{range $k, $v := .PrivateRegistryConfig.Mirrors }}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."{{$k}}"]
|
|
endpoint = [{{range $i, $j := $v.Endpoints}}{{if $i}}, {{end}}{{printf "%q" .}}{{end}}]
|
|
{{if $v.Rewrites}}
|
|
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."{{$k}}".rewrite]
|
|
{{range $pattern, $replace := $v.Rewrites}}
|
|
"{{$pattern}}" = "{{$replace}}"
|
|
{{end}}
|
|
{{end}}
|
|
{{end}}
|
|
{{end}}
|
|
[plugins."io.containerd.grpc.v1.cri".image_decryption]
|
|
key_model = ""
|
|
[plugins."io.containerd.grpc.v1.cri".x509_key_pair_streaming]
|
|
tls_cert_file = ""
|
|
tls_key_file = ""
|
|
[plugins."io.containerd.internal.v1.opt"]
|
|
path = "{{ replace .NodeConfig.Containerd.Opt }}"
|
|
[plugins."io.containerd.internal.v1.restart"]
|
|
interval = "10s"
|
|
[plugins."io.containerd.metadata.v1.bolt"]
|
|
content_sharing_policy = "shared"
|
|
[plugins."io.containerd.runtime.v2.task"]
|
|
platforms = ["windows/amd64", "linux/amd64"]
|
|
[plugins."io.containerd.service.v1.diff-service"]
|
|
default = ["windows", "windows-lcow"]
|
|
`
|
|
|
|
func ParseTemplateFromConfig(templateBuffer string, config interface{}) (string, error) {
|
|
out := new(bytes.Buffer)
|
|
funcs := template.FuncMap{
|
|
"replace": func(s string) string {
|
|
return strings.ReplaceAll(s, "\\", "\\\\")
|
|
},
|
|
"deschemify": func(s string) string {
|
|
if strings.HasPrefix(s, "npipe:") {
|
|
u, err := url.Parse(s)
|
|
if err != nil {
|
|
return ""
|
|
}
|
|
return u.Path
|
|
}
|
|
return s
|
|
},
|
|
}
|
|
t := template.Must(template.New("compiled_template").Funcs(funcs).Parse(templateBuffer))
|
|
if err := t.Execute(out, config); err != nil {
|
|
return "", err
|
|
}
|
|
return out.String(), nil
|
|
}
|