2015-12-30 16:11:33 +00:00
|
|
|
---
|
2017-09-27 13:47:47 +00:00
|
|
|
# Set to true to allow pre-checks to fail and continue deployment
|
|
|
|
ignore_assert_errors: false
|
|
|
|
|
2018-02-07 06:53:09 +00:00
|
|
|
epel_enabled: false
|
2022-02-26 18:29:23 +00:00
|
|
|
# Kubespray sets this to true after clusterDNS is running to apply changes to the host resolv.conf
|
2018-11-01 15:08:50 +00:00
|
|
|
dns_late: false
|
2016-10-14 21:46:44 +00:00
|
|
|
|
2015-12-31 13:07:02 +00:00
|
|
|
common_required_pkgs:
|
2018-05-08 08:03:30 +00:00
|
|
|
- "{{ (ansible_distribution == 'openSUSE Tumbleweed') | ternary('openssl-1_1', 'openssl') }}"
|
2015-12-31 13:07:02 +00:00
|
|
|
- curl
|
2016-01-09 09:45:50 +00:00
|
|
|
- rsync
|
2016-09-14 19:27:33 +00:00
|
|
|
- socat
|
2017-02-08 21:41:36 +00:00
|
|
|
- unzip
|
2019-02-04 20:23:33 +00:00
|
|
|
- e2fsprogs
|
|
|
|
- xfsprogs
|
2020-04-08 14:37:44 +00:00
|
|
|
- ebtables
|
2021-04-15 15:33:50 +00:00
|
|
|
- bash-completion
|
2022-08-16 12:17:18 +00:00
|
|
|
- tar
|
2015-12-31 13:07:02 +00:00
|
|
|
|
2016-08-08 10:59:20 +00:00
|
|
|
# Set to true if your network does not support IPv6
|
|
|
|
# This maybe necessary for pulling Docker images from
|
|
|
|
# GCE docker repository
|
|
|
|
disable_ipv6_dns: false
|
2016-03-29 12:50:22 +00:00
|
|
|
|
2022-06-17 08:34:32 +00:00
|
|
|
kube_owner: kube
|
2016-12-27 15:39:00 +00:00
|
|
|
kube_cert_group: kube-cert
|
|
|
|
kube_config_dir: /etc/kubernetes
|
2019-04-19 13:01:54 +00:00
|
|
|
kube_cert_dir: "{{ kube_config_dir }}/ssl"
|
|
|
|
kube_cert_compat_dir: /etc/kubernetes/pki
|
2019-07-30 19:00:10 +00:00
|
|
|
kubelet_flexvolumes_plugins_dir: /usr/libexec/kubernetes/kubelet-plugins/volume/exec
|
2016-03-29 12:50:22 +00:00
|
|
|
|
2020-08-28 09:28:53 +00:00
|
|
|
# Flatcar Container Linux by Kinvolk cloud init config file to define /etc/resolv.conf content
|
2016-12-07 15:57:05 +00:00
|
|
|
# for hostnet pods and infra needs
|
|
|
|
resolveconf_cloud_init_conf: /etc/resolveconf_cloud_init.conf
|
2017-06-30 12:17:03 +00:00
|
|
|
|
|
|
|
# All inventory hostnames will be written into each /etc/hosts file.
|
|
|
|
populate_inventory_to_hosts_file: true
|
2022-10-04 13:26:16 +00:00
|
|
|
# K8S Api FQDN will be written into /etc/hosts file.
|
|
|
|
populate_loadbalancer_apiserver_to_hosts_file: true
|
2017-10-11 19:40:21 +00:00
|
|
|
|
2018-04-27 15:50:58 +00:00
|
|
|
sysctl_file_path: "/etc/sysctl.d/99-sysctl.conf"
|
2018-08-22 10:10:49 +00:00
|
|
|
|
2018-08-24 12:06:07 +00:00
|
|
|
etc_hosts_localhost_entries:
|
|
|
|
127.0.0.1:
|
|
|
|
expected:
|
|
|
|
- localhost
|
|
|
|
- localhost.localdomain
|
2018-08-22 10:10:49 +00:00
|
|
|
::1:
|
2018-08-24 12:06:07 +00:00
|
|
|
expected:
|
|
|
|
- localhost6
|
|
|
|
- localhost6.localdomain
|
|
|
|
unexpected:
|
|
|
|
- localhost
|
|
|
|
- localhost.localdomain
|
2019-06-11 06:22:15 +00:00
|
|
|
|
|
|
|
# Minimal memory requirement in MB for safety checks
|
|
|
|
minimal_node_memory_mb: 1024
|
|
|
|
minimal_master_memory_mb: 1500
|
2020-02-28 09:56:38 +00:00
|
|
|
|
|
|
|
yum_repo_dir: /etc/yum.repos.d
|
2020-11-23 07:47:35 +00:00
|
|
|
|
|
|
|
# number of times package install task should be retried
|
|
|
|
pkg_install_retries: 4
|
2021-01-11 14:15:08 +00:00
|
|
|
|
|
|
|
# Check if access_ip responds to ping. Set false if your firewall blocks ICMP.
|
|
|
|
ping_access_ip: true
|
2022-06-28 20:15:34 +00:00
|
|
|
|
|
|
|
## NTP Settings
|
|
|
|
# Start the ntpd or chrony service and enable it at system boot.
|
|
|
|
ntp_enabled: false
|
|
|
|
# The package to install which provides NTP functionality.
|
|
|
|
# The default is ntp for most platforms, or chrony on RHEL/CentOS 7 and later.
|
|
|
|
# The ntp_package can be one of ['ntp','chrony']
|
|
|
|
ntp_package: >-
|
|
|
|
{% if ansible_os_family == "RedHat" -%}
|
|
|
|
chrony
|
|
|
|
{%- else -%}
|
|
|
|
ntp
|
|
|
|
{%- endif -%}
|
|
|
|
|
|
|
|
# Manage the NTP configuration file.
|
|
|
|
ntp_manage_config: false
|
|
|
|
# Specify the NTP servers
|
|
|
|
# Only takes effect when ntp_manage_config is true.
|
|
|
|
ntp_servers:
|
|
|
|
- "0.pool.ntp.org iburst"
|
|
|
|
- "1.pool.ntp.org iburst"
|
|
|
|
- "2.pool.ntp.org iburst"
|
|
|
|
- "3.pool.ntp.org iburst"
|
|
|
|
# Restrict NTP access to these hosts.
|
|
|
|
# Only takes effect when ntp_manage_config is true.
|
|
|
|
ntp_restrict:
|
|
|
|
- "127.0.0.1"
|
|
|
|
- "::1"
|
|
|
|
# The NTP driftfile path
|
|
|
|
# Only takes effect when ntp_manage_config is true.
|
|
|
|
ntp_driftfile: /var/lib/ntp/ntp.drift
|
|
|
|
# Enable tinker panic is useful when running NTP in a VM environment.
|
|
|
|
# Only takes effect when ntp_manage_config is true.
|
|
|
|
ntp_tinker_panic: false
|
|
|
|
|
|
|
|
# Force sync time immediately after the ntp installed, which is useful in in newly installed system.
|
|
|
|
ntp_force_sync_immediately: false
|
2022-09-15 04:11:22 +00:00
|
|
|
|
|
|
|
# Set the timezone for your server. eg: "Etc/UTC","Etc/GMT-8". If not set, the timezone will not change.
|
|
|
|
ntp_timezone: ""
|