c12s-kubespray/roles/network_plugin/calico/defaults/main.yml

---
# Enables Internet connectivity from containers
nat_outgoing: true

# Use IP-over-IP encapsulation across hosts
ipip: true
ipip_mode: always  # change to "cross-subnet" if you only want ipip encapsulation on traffic going across subnets

# Set to true if you want your calico cni binaries to overwrite the
# ones from hyperkube while leaving other cni plugins intact.
overwrite_hyperkube_cni: true

calico_cert_dir: /etc/calico/certs
etcd_cert_dir: /etc/ssl/etcd/ssl

# Global as_num (/calico/bgp/v1/global/as_num)
global_as_num: "64512"

# You can set MTU value here. If left undefined or empty, it will
# not be specified in calico CNI config, so Calico will use built-in
# defaults. The value should be a number, not a string.
# calico_mtu: 1500

# Limits for apps
calico_node_memory_limit: 500M
calico_node_cpu_limit: 300m
calico_node_memory_requests: 64M
calico_node_cpu_requests: 150m
calicoctl_memory_limit: 170M
calicoctl_cpu_limit: 100m
calicoctl_memory_requests: 32M
calicoctl_cpu_requests: 50m

# Enable Prometheus Metrics endpoint for felix
calico_felix_prometheusmetricsenabled: "false"
calico_felix_prometheusmetricsport: 9091
calico_felix_prometheusgometricsenabled: "true"
calico_felix_prometheusprocessmetricsenabled: "true"

# Should calico ignore kernel's RPF check setting,
# see https://github.com/projectcalico/felix/blob/ab8799eaea66627e5db7717e62fca61fd9c08646/python/calico/felix/config.py#L198
calico_node_ignorelooserpf: false

rbac_resources:
  - sa
  - clusterrole
  - clusterrolebinding
split network plugins into distinct roles 2016-01-30 15:04:47 +00:00			`---`
calico: enabling nat outgoing by default 2016-02-21 11:42:23 +00:00			`# Enables Internet connectivity from containers`
			`nat_outgoing: true`
choose between gce and aws cloud providers 2016-03-23 16:27:06 +00:00
Support --ipip option for calico pool Adds new boolean configuration variable for calico network plugin `ipip`. When it's enabled calico pool is created with '--ipip' option (IP-over-IP encapsulation across hosts). Also refactor pool creation tasks to simplify logic and make tasks more readable. 2016-07-21 11:05:40 +00:00			`# Use IP-over-IP encapsulation across hosts`
updated to direct control over ipip 2017-06-23 07:16:05 +00:00			`ipip: true`
Allow calico ipPool to be created with mode "cross-subnet" 2017-07-04 23:05:16 +00:00			`ipip_mode: always # change to "cross-subnet" if you only want ipip encapsulation on traffic going across subnets`
Support --ipip option for calico pool Adds new boolean configuration variable for calico network plugin `ipip`. When it's enabled calico pool is created with '--ipip' option (IP-over-IP encapsulation across hosts). Also refactor pool creation tasks to simplify logic and make tasks more readable. 2016-07-21 11:05:40 +00:00
Allow to use custom "canalized" calico cni - Allow to overwrite calico cni binaries copied from hyperkube by the custom ones. - Fix calico-ipam deployment (it had wrong source in rsync) - Make copy from hyperkube idempotent (use rsync instead of cp) - Remove some orphaned comments 2016-09-22 15:34:11 +00:00			`# Set to true if you want your calico cni binaries to overwrite the`
			`# ones from hyperkube while leaving other cni plugins intact.`
upgrade to kubernetes version 1.4.0 test to change the machine type Revert "test to change the machine type" This reverts commit 7a91f1b5405a39bee6cb91940b09a0b0f9d3aee1. use google dns server when no upstream dns are defined comment upstream_dns_servers update documentation remove deprecated kubelet flags Revert "remove deprecated kubelet flags" This reverts commit 21e3b893c896d0291c36a07d0414f4cb88b8d8ac. 2016-10-08 17:19:25 +00:00			`overwrite_hyperkube_cni: true`
Add etcd TLS support 2016-11-09 10:44:41 +00:00
			`calico_cert_dir: /etc/calico/certs`
			`etcd_cert_dir: /etc/ssl/etcd/ssl`
Move CNI config and add MTU support for calico-cni - Move CNI configuration creation for Calico to appropriate network_plugin role from kubernetes/node. - Add support for MTU configuration in Calico. 2016-11-14 07:48:28 +00:00
Add calico/routereflector support Add BGP route reflectors support in order to optimize BGP topology for deployments with Calico network plugin. Also bump version of calico/ctl for some bug fixes. 2016-12-08 16:48:54 +00:00			`# Global as_num (/calico/bgp/v1/global/as_num)`
			`global_as_num: "64512"`

Move CNI config and add MTU support for calico-cni - Move CNI configuration creation for Calico to appropriate network_plugin role from kubernetes/node. - Add support for MTU configuration in Calico. 2016-11-14 07:48:28 +00:00			`# You can set MTU value here. If left undefined or empty, it will`
			`# not be specified in calico CNI config, so Calico will use built-in`
			`# defaults. The value should be a number, not a string.`
			`# calico_mtu: 1500`
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-23 14:44:44 +00:00
			`# Limits for apps`
			`calico_node_memory_limit: 500M`
			`calico_node_cpu_limit: 300m`
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines 2017-02-27 16:53:43 +00:00			`calico_node_memory_requests: 64M`
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-23 14:44:44 +00:00			`calico_node_cpu_requests: 150m`
			`calicoctl_memory_limit: 170M`
			`calicoctl_cpu_limit: 100m`
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines 2017-02-27 16:53:43 +00:00			`calicoctl_memory_requests: 32M`
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-23 14:44:44 +00:00			`calicoctl_cpu_requests: 50m`
Add calico variable that enables ignoring Kernel's RPF Setting (#1493) 2017-08-20 11:01:09 +00:00
Adding calico/node env vars for prometheus configuration 2017-10-03 21:24:05 +00:00			`# Enable Prometheus Metrics endpoint for felix`
			`calico_felix_prometheusmetricsenabled: "false"`
			`calico_felix_prometheusmetricsport: 9091`
			`calico_felix_prometheusgometricsenabled: "true"`
			`calico_felix_prometheusprocessmetricsenabled: "true"`

Add calico variable that enables ignoring Kernel's RPF Setting (#1493) 2017-08-20 11:01:09 +00:00			`# Should calico ignore kernel's RPF check setting,`
			`# see https://github.com/projectcalico/felix/blob/ab8799eaea66627e5db7717e62fca61fd9c08646/python/calico/felix/config.py#L198`
			`calico_node_ignorelooserpf: false`
Move calico to daemonset (#1605) * Drop legacy calico logic * add calico as a daemonset 2017-09-04 08:29:51 +00:00
			`rbac_resources:`
			`- sa`
			`- clusterrole`
			`- clusterrolebinding`