2017-04-12 10:59:49 +00:00
# Valid bootstrap options (required): ubuntu, coreos, centos, none
bootstrap_os : none
#Directory where etcd data stored
etcd_data_dir : /var/lib/etcd
# Directory where the binaries will be installed
bin_dir : /usr/local/bin
2016-12-27 15:39:00 +00:00
## The access_ip variable is used to define how other nodes should access
## the node. This is used in flannel to allow other flannel nodes to see
## this node for example. The access_ip is really useful AWS and Google
## environments where the nodes are accessed remotely by the "public" ip,
## but don't know about that address themselves.
#access_ip: 1.1.1.1
### LOADBALANCING AND ACCESS MODES
## Enable multiaccess to configure etcd clients to access all of the etcd members directly
## as the "http://hostX:port, http://hostY:port, ..." and ignore the proxy loadbalancers.
## This may be the case if clients support and loadbalance multiple etcd servers natively.
#etcd_multiaccess: true
2018-01-11 18:07:43 +00:00
### ETCD: disable peer client cert authentication.
# This affects ETCD_PEER_CLIENT_CERT_AUTH variable
#etcd_peer_client_auth: true
2016-12-27 15:39:00 +00:00
## External LB example config
## apiserver_loadbalancer_domain_name: "elb.some.domain"
#loadbalancer_apiserver:
# address: 1.2.3.4
# port: 1234
## Internal loadbalancers for apiservers
#loadbalancer_apiserver_localhost: true
## Local loadbalancer should use this port instead, if defined.
2017-02-24 14:58:54 +00:00
## Defaults to kube_apiserver_port (6443)
2016-12-27 15:39:00 +00:00
#nginx_kube_apiserver_port: 8443
### OTHER OPTIONAL VARIABLES
## For some things, kubelet needs to load kernel modules. For example, dynamic kernel services are needed
## for mounting persistent volumes into containers. These may not be loaded by preinstall kubernetes
## processes. For example, ceph and rbd backed volumes. Set to true to allow kubelet to load kernel
## modules.
# kubelet_load_modules: false
2017-02-24 11:25:45 +00:00
## Internal network total size. This is the prefix of the
2016-12-27 15:39:00 +00:00
## entire network. Must be unused in your environment.
#kube_network_prefix: 18
## With calico it is possible to distributed routes with border routers of the datacenter.
## Warning : enabling router peering will disable calico's default behavior ('node mesh').
## The subnets of each nodes will be distributed by the datacenter router
#peer_with_router: false
2016-12-21 16:18:11 +00:00
## Upstream dns servers used by dnsmasq
2016-10-08 17:19:25 +00:00
#upstream_dns_servers:
# - 8.8.8.8
# - 8.8.4.4
2016-12-21 16:18:11 +00:00
2016-12-27 15:39:00 +00:00
## There are some changes specific to the cloud providers
## for instance we need to encapsulate packets with some network plugins
2017-11-23 13:43:36 +00:00
## If set the possible values are either 'gce', 'aws', 'azure', 'openstack', 'vsphere', or 'external'
2016-12-27 15:39:00 +00:00
## When openstack is used make sure to source in the openstack credentials
## like you would do when using nova-client before starting the playbook.
#cloud_provider:
2015-12-15 14:20:08 +00:00
2016-12-27 15:39:00 +00:00
## When azure is used, you need to also set the following variables.
## see docs/azure.md for details on how to get these values
2016-11-29 09:20:28 +00:00
#azure_tenant_id:
#azure_subscription_id:
#azure_aad_client_id:
#azure_aad_client_secret:
#azure_resource_group:
#azure_location:
#azure_subnet_name:
#azure_security_group_name:
#azure_vnet_name:
2016-12-09 13:06:48 +00:00
#azure_route_table_name:
2016-11-29 09:20:28 +00:00
2018-01-05 11:05:24 +00:00
## When OpenStack is used, Cinder version can be explicitly specified if autodetection fails (Fixed in 1.9: https://github.com/kubernetes/kubernetes/issues/50461)
2017-09-16 07:43:24 +00:00
#openstack_blockstorage_version: "v1/v2/auto (default)"
2018-01-05 11:05:24 +00:00
## When OpenStack is used, if LBaaSv2 is available you can enable it with the following 2 variables.
2017-08-20 10:59:15 +00:00
#openstack_lbaas_enabled: True
#openstack_lbaas_subnet_id: "Neutron subnet ID (not network ID) to create LBaaS VIP"
2018-01-05 11:05:24 +00:00
## To enable automatic floating ip provisioning, specify a subnet.
2017-09-16 07:43:24 +00:00
#openstack_lbaas_floating_network_id: "Neutron network ID (not subnet ID) to get floating IP from, disabled by default"
2018-01-05 11:05:24 +00:00
## Override default LBaaS behavior
#openstack_lbaas_use_octavia: False
#openstack_lbaas_method: "ROUND_ROBIN"
#openstack_lbaas_provider: "haproxy"
2017-08-20 10:59:15 +00:00
#openstack_lbaas_create_monitor: "yes"
#openstack_lbaas_monitor_delay: "1m"
#openstack_lbaas_monitor_timeout: "30s"
#openstack_lbaas_monitor_max_retries: "3"
2017-09-13 18:00:51 +00:00
## Uncomment to enable experimental kubeadm deployment mode
#kubeadm_enabled: false
2017-09-26 04:56:08 +00:00
#kubeadm_token_first: "{{ lookup('password', 'credentials/kubeadm_token_first length=6 chars=ascii_lowercase,digits') }}"
#kubeadm_token_second: "{{ lookup('password', 'credentials/kubeadm_token_second length=16 chars=ascii_lowercase,digits') }}"
2017-09-13 18:00:51 +00:00
#kubeadm_token: "{{ kubeadm_token_first }}.{{ kubeadm_token_second }}"
#
2017-10-11 18:47:27 +00:00
## Set these proxy values in order to update package manager and docker daemon to use proxies
2016-12-27 15:39:00 +00:00
#http_proxy: ""
#https_proxy: ""
2017-10-11 18:47:27 +00:00
## Refer to roles/kubespray-defaults/defaults/main.yml before modifying no_proxy
2016-12-27 15:39:00 +00:00
#no_proxy: ""
2016-05-04 16:00:46 +00:00
2016-12-07 16:18:41 +00:00
## Uncomment this if you want to force overlay/overlay2 as docker storage driver
## Please note that overlay2 is only supported on newer kernels
#docker_storage_options: -s overlay2
2017-06-26 09:29:12 +00:00
# Uncomment this if you have more than 3 nameservers, then we'll only use the first 3.
#docker_dns_servers_strict: false
2016-12-27 15:39:00 +00:00
## Default packages to install within the cluster, f.e:
#kpm_packages:
2016-05-04 16:00:46 +00:00
# - name: kube-system/grafana
2016-12-13 15:36:17 +00:00
2017-01-13 20:31:10 +00:00
## Certificate Management
## This setting determines whether certs are generated via scripts or whether a
## cluster of Hashicorp's Vault is started to issue certificates (using etcd
## as a backend). Options are "script" or "vault"
2016-12-27 15:39:00 +00:00
#cert_management: script
2017-01-10 15:11:42 +00:00
2017-09-27 13:47:47 +00:00
# Set to true to allow pre-checks to fail and continue deployment
#ignore_assert_errors: false
2017-06-14 08:39:38 +00:00
## Etcd auto compaction retention for mvcc key value store in hour
#etcd_compaction_retention: 0
2017-07-24 08:25:38 +00:00
## Set level of detail for etcd exported metrics, specify 'extensive' to include histogram metrics.
#etcd_metrics: basic