diff --git a/bootstrapper/internal/kubernetes/k8sapi/kubeadm_config.go b/bootstrapper/internal/kubernetes/k8sapi/kubeadm_config.go index 59607da04..06d01fb80 100644 --- a/bootstrapper/internal/kubernetes/k8sapi/kubeadm_config.go +++ b/bootstrapper/internal/kubernetes/k8sapi/kubeadm_config.go @@ -66,13 +66,14 @@ func (c *CoreOSConfiguration) InitConfiguration(externalCloudProvider bool, k8sV APIServer: kubeadm.APIServer{ ControlPlaneComponent: kubeadm.ControlPlaneComponent{ ExtraArgs: map[string]string{ - "audit-policy-file": auditPolicyPath, - "audit-log-path": filepath.Join(auditLogDir, auditLogFile), // CIS benchmark - "audit-log-maxage": "30", // CIS benchmark - Default value of Rancher - "audit-log-maxbackup": "10", // CIS benchmark - Default value of Rancher - "audit-log-maxsize": "100", // CIS benchmark - Default value of Rancher - "profiling": "false", // CIS benchmark - "egress-selector-config-file": "/etc/kubernetes/egress-selector-configuration.yaml", + "audit-policy-file": auditPolicyPath, + "audit-log-path": filepath.Join(auditLogDir, auditLogFile), // CIS benchmark + "audit-log-maxage": "30", // CIS benchmark - Default value of Rancher + "audit-log-maxbackup": "10", // CIS benchmark - Default value of Rancher + "audit-log-maxsize": "100", // CIS benchmark - Default value of Rancher + "profiling": "false", // CIS benchmark + // Disabled konnectivity until agents have stable connections + // "egress-selector-config-file": "/etc/kubernetes/egress-selector-configuration.yaml", "kubelet-certificate-authority": filepath.Join( kubeconstants.KubernetesDir, kubeconstants.DefaultCertificateDir,