diff --git a/cluster/gce/addons/konnectivity-agent/konnectivity-agent-ds.yaml b/cluster/gce/addons/konnectivity-agent/konnectivity-agent-ds.yaml index 22e5e2716e7..7c0359c3cd5 100644 --- a/cluster/gce/addons/konnectivity-agent/konnectivity-agent-ds.yaml +++ b/cluster/gce/addons/konnectivity-agent/konnectivity-agent-ds.yaml @@ -33,6 +33,9 @@ spec: "--ca-cert=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt", "--proxy-server-host=__APISERVER_IP__", "--proxy-server-port=8132", + "--sync-interval=5s", + "--sync-interval-cap=30s", + "--probe-interval=5s", "--service-account-token-path=/var/run/secrets/tokens/konnectivity-agent-token" ] env: diff --git a/cluster/gce/gci/configure-helper.sh b/cluster/gce/gci/configure-helper.sh index e14df787cdd..200ef36af39 100644 --- a/cluster/gce/gci/configure-helper.sh +++ b/cluster/gce/gci/configure-helper.sh @@ -1932,6 +1932,8 @@ function prepare-konnectivity-server-manifest { params+=("--agent-service-account=konnectivity-agent") params+=("--kubeconfig=/etc/srv/kubernetes/konnectivity-server/kubeconfig") params+=("--authentication-audience=system:konnectivity-server") + params+=("--kubeconfig-qps=75") + params+=("--kubeconfig-burst=150") konnectivity_args="" for param in "${params[@]}"; do konnectivity_args+=", \"${param}\""