c12s-kubespray/roles/network_plugin/canal/defaults/main.yml

---
# The interface used by canal for host <-> host communication.
# If left blank, then the interface is chosing using the node's
# default route.
canal_iface: ""

# Whether or not to masquerade traffic to destinations not within
# the pod network.
canal_masquerade: "true"

# Log-level
canal_log_level: "info"

# Etcd SSL dirs
canal_cert_dir: /etc/canal/certs
etcd_cert_dir: /etc/ssl/etcd/ssl

# Canal Network Policy directory
canal_policy_dir: /etc/kubernetes/policy

# Limits for apps
calico_node_memory_limit: 500M
calico_node_cpu_limit: 200m
calico_node_memory_requests: 64M
calico_node_cpu_requests: 50m
flannel_memory_limit: 500M
flannel_cpu_limit: 200m
flannel_memory_requests: 64M
flannel_cpu_requests: 50m
calicoctl_memory_limit: 170M
calicoctl_cpu_limit: 100m
calicoctl_memory_requests: 32M
calicoctl_cpu_requests: 25m

rbac_resources:
  - sa
  - clusterrole
  - clusterrolebinding
Adding yamllinter to ci steps (#1556) * Adding yaml linter to ci check * Minor linting fixes from yamllint * Changing CI to install python pkgs from requirements.txt - adding in a secondary requirements.txt for tests - moving yamllint to tests requirements 2017-08-24 09:09:52 +00:00			`---`
Adding support for canal network plugin This patch provides support for Canal network plugin installation as a self-hosted app, see the following link for details: https://github.com/tigera/canal/tree/master/k8s-install 2016-11-03 15:57:11 +00:00			`# The interface used by canal for host <-> host communication.`
			`# If left blank, then the interface is chosing using the node's`
			`# default route.`
			`canal_iface: ""`

			`# Whether or not to masquerade traffic to destinations not within`
			`# the pod network.`
			`canal_masquerade: "true"`

			`# Log-level`
			`canal_log_level: "info"`
Fix etcd ssl for canal - Move CNI configuration from `kubernetes/node` role to `network_plugin/canal` - Create SSL dir for Canal and symlink etcd SSL files - Add needed options to `canal-config` configmap - Run flannel and calico-node containers with proper configuration 2016-11-14 12:03:54 +00:00
			`# Etcd SSL dirs`
			`canal_cert_dir: /etc/canal/certs`
			`etcd_cert_dir: /etc/ssl/etcd/ssl`
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-23 14:44:44 +00:00
Create network policy directory for canal 2017-01-04 22:51:11 +00:00			`# Canal Network Policy directory`
			`canal_policy_dir: /etc/kubernetes/policy`

Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-23 14:44:44 +00:00			`# Limits for apps`
			`calico_node_memory_limit: 500M`
			`calico_node_cpu_limit: 200m`
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines 2017-02-27 16:53:43 +00:00			`calico_node_memory_requests: 64M`
Significantly reduce memory requirements Canal runs more pods and upgrades need a bit of extra room to load new pods in and get the old ones out. 2017-03-23 09:11:30 +00:00			`calico_node_cpu_requests: 50m`
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com> 2016-12-23 14:44:44 +00:00			`flannel_memory_limit: 500M`
			`flannel_cpu_limit: 200m`
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines 2017-02-27 16:53:43 +00:00			`flannel_memory_requests: 64M`
Significantly reduce memory requirements Canal runs more pods and upgrades need a bit of extra room to load new pods in and get the old ones out. 2017-03-23 09:11:30 +00:00			`flannel_cpu_requests: 50m`
Adding calicoctl to canal deployment 2017-01-04 22:46:00 +00:00			`calicoctl_memory_limit: 170M`
			`calicoctl_cpu_limit: 100m`
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines 2017-02-27 16:53:43 +00:00			`calicoctl_memory_requests: 32M`
Significantly reduce memory requirements Canal runs more pods and upgrades need a bit of extra room to load new pods in and get the old ones out. 2017-03-23 09:11:30 +00:00			`calicoctl_cpu_requests: 25m`
Add RBAC support for canal Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job 2017-08-31 06:16:57 +00:00
			`rbac_resources:`
			`- sa`
			`- clusterrole`
			`- clusterrolebinding`