c12s-kubespray/roles/kubernetes/preinstall/defaults/main.yml

---
run_gitinfos: false

# Set to true to allow pre-checks to fail and continue deployment
ignore_assert_errors: false

epel_enabled: false
dns_late: false

common_required_pkgs:
  - python-httplib2
  - "{{ (ansible_distribution == 'openSUSE Tumbleweed') | ternary('openssl-1_1', 'openssl') }}"
  - curl
  - rsync
  - bash-completion
  - socat
  - unzip

# Set to true if your network does not support IPv6
# This maybe necessary for pulling Docker images from
# GCE docker repository
disable_ipv6_dns: false

kube_cert_group: kube-cert
kube_config_dir: /etc/kubernetes

# Container Linux by CoreOS cloud init config file to define /etc/resolv.conf content
# for hostnet pods and infra needs
resolveconf_cloud_init_conf: /etc/resolveconf_cloud_init.conf

# All inventory hostnames will be written into each /etc/hosts file.
populate_inventory_to_hosts_file: true

preinstall_selinux_state: permissive

sysctl_file_path: "/etc/sysctl.d/99-sysctl.conf"

etc_hosts_localhost_entries:
  127.0.0.1:
    expected:
      - localhost
      - localhost.localdomain
  ::1:
    expected:
      - localhost6
      - localhost6.localdomain
    unexpected:
      - localhost
      - localhost.localdomain
install docker on a largest number of linux distribution (based on https://github.com/marklee77/ansible-role-docker) 2015-12-30 16:11:33 +00:00			`---`
don't run gitinfos by default 2016-01-21 12:19:02 +00:00			`run_gitinfos: false`

Verify valid settings before deploy (#1705) Also fix yaml lint issues Fixes #1703 2017-09-27 13:47:47 +00:00			`# Set to true to allow pre-checks to fail and continue deployment`
			`ignore_assert_errors: false`

Disalbe install epel-release rpm on Centos/Redhat 1.Disalbe install epel-release rpm on Centos/Redhat 2.Use yum install epel-release 2018-02-07 06:53:09 +00:00			`epel_enabled: false`
Skip most of kubernetes/preinstall role during late DNS config (#3627) When using resolvconf_mode host_resolvconf, there is an early DNS config stage where Kubernetes cluster DNS is not injected for host DNS intially. Later, the cluster DNS is enabled, but we do not need to run every task from the kubernetes/preinstall role. 2018-11-01 15:08:50 +00:00			`dns_late: false`
Parameterize several dependency endpoints so that they can be overridden with internal mirrors. Signed-off-by: Chad Swenson <chadswen@gmail.com> 2016-10-14 21:46:44 +00:00
split role download and preinstall 2015-12-31 13:07:02 +00:00			`common_required_pkgs:`
common role in order to support other linux distribs 2015-12-30 21:15:18 +00:00			`- python-httplib2`
opensuse: Fix OpenSSL package name OpenSSL 1.1 package in openSUSE Tumbleweed is named openssl-1_1, not openssl-1_1_0. 2018-05-08 08:03:30 +00:00			`- "{{ (ansible_distribution == 'openSUSE Tumbleweed') \| ternary('openssl-1_1', 'openssl') }}"`
split role download and preinstall 2015-12-31 13:07:02 +00:00			`- curl`
Flannel running as pod 2016-01-09 09:45:50 +00:00			`- rsync`
generate secrets on deployment machine test travis with sudo=true instead of required 2016-02-11 22:08:16 +00:00			`- bash-completion`
Add socat do required pkgs It's required for port forwarding. 2016-09-14 19:27:33 +00:00			`- socat`
Vault security hardening and role isolation 2017-02-08 21:41:36 +00:00			`- unzip`
split role download and preinstall 2015-12-31 13:07:02 +00:00
Add option to disable ipv6 dns lookup New variable disable_ipv6_dns in kubernetes/preinstall. 2016-08-08 10:59:20 +00:00			`# Set to true if your network does not support IPv6`
			`# This maybe necessary for pulling Docker images from`
			`# GCE docker repository`
			`disable_ipv6_dns: false`
Implemented cloud-provider integration for OpenStack. Currently kubespray does not install kubernetes in a way that allows cinder volumes to be used. This commit provides the necessary cloud configuration file and configures kubelet and kube-apiserver to use it. 2016-03-29 12:50:22 +00:00
Rework inventory all by real groups' vars * Leave all.yml to keep only optional vars * Store groups' specific vars by existing group names * Fix optional vars casted as mandatory (add default()) * Fix missing defaults for an optional IP var * Relink group_vars for terraform to reflect changes Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru> 2016-12-27 15:39:00 +00:00			`kube_cert_group: kube-cert`
			`kube_config_dir: /etc/kubernetes`
Implemented cloud-provider integration for OpenStack. Currently kubespray does not install kubernetes in a way that allows cinder volumes to be used. This commit provides the necessary cloud configuration file and configures kubelet and kube-apiserver to use it. 2016-03-29 12:50:22 +00:00
Rename CoreOS fact Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru> 2017-01-05 10:35:16 +00:00			`# Container Linux by CoreOS cloud init config file to define /etc/resolv.conf content`
Preconfigure DNS stack and docker early In order to enable offline/intranet installation cases: * Move DNS/resolvconf configuration to preinstall role. Remove skip_dnsmasq_k8s var as not needed anymore. * Preconfigure DNS stack early, which may be the case when downloading artifacts from intranet repositories. Do not configure K8s DNS resolvers for hosts /etc/resolv.conf yet early (as they may be not existing). * Reconfigure K8s DNS resolvers for hosts only after kubedns/dnsmasq was set up and before K8s apps to be created. * Move docker install task to early stage as well and unbind it from the etcd role's specific install path. Fix external flannel dependency on docker role handlers. Also fix the docker restart handlers' steps ordering to match the expected sequence (the socket then the service). * Add default resolver fact, which is the cloud provider specific and remove hardcoded GCE resolver. * Reduce default ndots for hosts /etc/resolv.conf to 2. Multiple search domains combined with high ndots values lead to poor performance of DNS stack and make ansible workers to fail very often with the "Timeout (12s) waiting for privilege escalation prompt:" error. * Update docs. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-07 15:57:05 +00:00			`# for hostnet pods and infra needs`
			`resolveconf_cloud_init_conf: /etc/resolveconf_cloud_init.conf`
added flag for not populating inventory entries to etc hosts file 2017-06-30 12:17:03 +00:00
			`# All inventory hostnames will be written into each /etc/hosts file.`
			`populate_inventory_to_hosts_file: true`
Rename dns_server, add var for selinux. (#1572) * Rename dns_server to dnsmasq_dns_server so that it includes role prefix as the var name is generic and conflicts when integrating with existing ansible automation. * Enable selinux state to be configurable with new var preinstall_selinux_state 2017-10-11 19:40:21 +00:00
			`preinstall_selinux_state: permissive`
sysctl file should be in defaults so that it can be overriden (#2475) * sysctl file should be in defaults so that it can be overriden * Change sysctl_file_path to be consistent with roles/kubernetes/preinstall/defaults/main.yml 2018-04-27 15:50:58 +00:00
			`sysctl_file_path: "/etc/sysctl.d/99-sysctl.conf"`
Localhost in hosts files should be updated (if necessary), not overriden 2018-08-22 10:10:49 +00:00
same work with less lines 2018-08-24 12:06:07 +00:00			`etc_hosts_localhost_entries:`
			`127.0.0.1:`
			`expected:`
			`- localhost`
			`- localhost.localdomain`
Localhost in hosts files should be updated (if necessary), not overriden 2018-08-22 10:10:49 +00:00			`::1:`
same work with less lines 2018-08-24 12:06:07 +00:00			`expected:`
			`- localhost6`
			`- localhost6.localdomain`
			`unexpected:`
			`- localhost`
			`- localhost.localdomain`