C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
c12s-kubespray/inventory/sample/group_vars/k8s-cluster/addons.yml

117 lines
3.8 KiB
YAML
Raw Normal View History

Yamllint fixes (#4410) * Lint everything in the repository with yamllint * yamllint fixes: syntax fixes only * yamllint fixes: move comments to play names * yamllint fixes: indent comments in .gitlab-ci.yml file
2019-04-01 09:38:33 +00:00
---
Split group-variables
2018-08-31 14:05:45 +00:00
# Kubernetes dashboard
# RBAC required. see docs/getting-started.md for access details.
[2.13] Backport CI fix (#7119) * [2.14] fix ci (#7021) * fix flake8 errors in Kubespray CI - tox-inventory-builder * fix flake8 errors in Kubespray CI - tox-inventory-builder * Invalidate CRI-O kubic repo's cache Signed-off-by: Victor Morales <v.morales@samsung.com> * add support to configure pkg install retries and use in CI job tf-ovh_ubuntu18-calico (due to it failing often) * Switch Calico and Cilium image repos to Quay.io Co-authored-by: Victor Morales <v.morales@samsung.com> Co-authored-by: Barry Melbourne <9964974+bmelbourne@users.noreply.github.com> Conflicts: roles/download/defaults/main.yml * up vagrant box to fedora/33-cloud-base in cri-o molecule tests (cherry picked from commit 06ec5393d770097c58a914ecf7a100251042bbd4) * add Google proxy-mirror-cache for docker hub to CI tests (cherry picked from commit d739a6bb2f935954510d6a83629584953db67fca) * containerd docker hub registry mirror support * containerd docker hub registry mirror support * add docs * fix typo * fix yamllint * fix indent in sample and ansible-playbook param in testcases_run * fix md * mv common vars to tests/common/_docker_hub_registry_mirror.yml * checkout vars to upgrade tests (cherry picked from commit 4a8a52bad9ecd89d3879b37601112200a62bfcd9) * Exclude .git/ from shellcheck If a branch name contains '.sh', current shellcheck checks the branch file under .git/ and outputs error because the format is not shell script one. This makes shellcheck exclude files under .git/ to avoid this issue. (cherry picked from commit e2467d87b65ad9050bea022a2d514172520e48f3) Co-authored-by: Hans Feldt <2808287+hafe@users.noreply.github.com> Co-authored-by: Sergey <s.bondarev@southbridge.ru> Co-authored-by: Kenichi Omichi <ken-oomichi@wx.jp.nec.com> * Switch some image from dockerhub to k8s.gcr (also increase pkg retries) (#6955) * Set packet_centos8-kube-ovn test to manual Signed-off-by: Rick Haan <rickhaan94@gmail.com> Co-authored-by: Etienne Champetier <champetier.etienne@gmail.com> Co-authored-by: Hans Feldt <2808287+hafe@users.noreply.github.com> Co-authored-by: Sergey <s.bondarev@southbridge.ru> Co-authored-by: Kenichi Omichi <ken-oomichi@wx.jp.nec.com> Co-authored-by: Florian Ruynat <16313165+floryut@users.noreply.github.com>
2021-01-21 14:49:04 +00:00
# dashboard_enabled: true
Split group-variables
2018-08-31 14:05:45 +00:00
# Helm deployment
helm_enabled: false
# Registry deployment
registry_enabled: false
Replaces nonexisting system_namespace variable (#3389)
2018-09-25 08:39:02 +00:00
# registry_namespace: kube-system
Split group-variables
2018-08-31 14:05:45 +00:00
# registry_storage_class: ""
# registry_disk_size: "10Gi"
Support Metrics Server as addon (#3560). (#3563) * Support Metrics Server as addon (#3560). * Update metrics server v0.3.1. * Add metrics server test. * Replace metrics server manifests with kubernetes/cluster/addons's. * Modify metrics server manifests for kubespray. * Follow PR#3558 node label node-role.kubernetes.io/master change * Fix metrics server parameters base_metrics_server_... to metrics_server_... * Fix too hard corded metrics_server_memory_per_node * Add configurable insecure tls for metrics-apiservice * Downloadable addon-resizer and extract parameter as variables * Remove metrics server version from deployment name * Metrics Server work when all masters has node role * Download metrics-server and add-resizer container only on master * ServiceAccount and ConfigMap is separated and fix application name * Remove old metrics server clusterrole template * Fix addon-resizer image specify * Make InternalIP default for metrics_server_kubelet_preferred_address_types Make InternalIP default because multiple preferrred address types does not work.
2018-11-23 08:36:21 +00:00
# Metrics Server deployment
metrics_server_enabled: false
# metrics_server_kubelet_insecure_tls: true
# metrics_server_metric_resolution: 60s
# metrics_server_kubelet_preferred_address_types: "InternalIP"
feat(external-provisioner): adds support for local-path-provisioner (#4232) * feat(external-provisioner/local-path-provisioner): adds support for local path provisioner Helpful for local development but also in production workloads (once the permission model is worked out) where you have redundancy built into the software uses the PVCs (e.g. database cluster with synchronous replication) * feat(local-path-provisioner): adds debug flag, image tag group var * fix(local-path-provisioner): moves image repo/tag to download role * test(gce_centos7-flannel): enables local-path-provisioner in test case * fix(addons): add image repo/tag to commented default values * fix(local-path-provisioner): typo in jinja template for local path provisioner * style(local-path-provisioner): debug flag condition re-formatted * fix(local-path-provisioner): adds missing default value for debug flag * fix(local-path-provisioner): syntax fix for debug if condition end * fix(local-path-provisioner): jinja template syntax: if condition white space
2019-02-26 06:45:30 +00:00
# Rancher Local Path Provisioner
local_path_provisioner_enabled: false
# local_path_provisioner_namespace: "local-path-storage"
# local_path_provisioner_storage_class: "local-path"
# local_path_provisioner_reclaim_policy: Delete
# local_path_provisioner_claim_root: /opt/local-path-provisioner/
# local_path_provisioner_debug: false
# local_path_provisioner_image_repo: "rancher/local-path-provisioner"
# local_path_provisioner_image_tag: "v0.0.2"
add local-path-provosioner helper image def (#5817)
2020-04-08 06:51:43 +00:00
# local_path_provisioner_helper_image_repo: "busybox"
# local_path_provisioner_helper_image_tag: "latest"
feat(external-provisioner): adds support for local-path-provisioner (#4232) * feat(external-provisioner/local-path-provisioner): adds support for local path provisioner Helpful for local development but also in production workloads (once the permission model is worked out) where you have redundancy built into the software uses the PVCs (e.g. database cluster with synchronous replication) * feat(local-path-provisioner): adds debug flag, image tag group var * fix(local-path-provisioner): moves image repo/tag to download role * test(gce_centos7-flannel): enables local-path-provisioner in test case * fix(addons): add image repo/tag to commented default values * fix(local-path-provisioner): typo in jinja template for local path provisioner * style(local-path-provisioner): debug flag condition re-formatted * fix(local-path-provisioner): adds missing default value for debug flag * fix(local-path-provisioner): syntax fix for debug if condition end * fix(local-path-provisioner): jinja template syntax: if condition white space
2019-02-26 06:45:30 +00:00
Split group-variables
2018-08-31 14:05:45 +00:00
# Local volume provisioner deployment
local_volume_provisioner_enabled: false
Replaces nonexisting system_namespace variable (#3389)
2018-09-25 08:39:02 +00:00
# local_volume_provisioner_namespace: kube-system
Support multiple local volume provisioner StorageClasses (#3450) - Local Volume StorageClass configuration is now manged by `local_volume_provisioner_storage_classes`, a list of maps that specifies local storage classes with `name` `host_dir` and `mount_dir` keys per entry - Tasks and templates updated to loop through local volume storage classes - Previous defaults for path/class names were not changed - Fixed an issue where a `kubernetes/preinstall` was creating directories inconsistently with the `kubernetes-apps/external_provisioner/local_volume_provisioner` task
2018-10-05 12:52:25 +00:00
# local_volume_provisioner_storage_classes:
Bugfixes for Local Volume Provisioner - Fixed an issue where storage class host directories were looped through excessive target hosts - Fixes examples in the LVP `README.md` to use nested dicts instead of a list of dicts
2019-01-08 23:32:39 +00:00
# local-storage:
# host_dir: /mnt/disks
# mount_dir: /mnt/disks
Upgrade local volume provisioner to v2.3.2 (#4983)
2019-07-16 12:27:26 +00:00
# volume_mode: Filesystem
# fs_type: ext4
Bugfixes for Local Volume Provisioner - Fixed an issue where storage class host directories were looped through excessive target hosts - Fixes examples in the LVP `README.md` to use nested dicts instead of a list of dicts
2019-01-08 23:32:39 +00:00
# fast-disks:
# host_dir: /mnt/fast-disks
# mount_dir: /mnt/fast-disks
# block_cleaner_command:
# - "/scripts/shred.sh"
# - "2"
# volume_mode: Filesystem
# fs_type: ext4
Split group-variables
2018-08-31 14:05:45 +00:00
# CephFS provisioner deployment
cephfs_provisioner_enabled: false
# cephfs_provisioner_namespace: "cephfs-provisioner"
# cephfs_provisioner_cluster: ceph
# cephfs_provisioner_monitors: "172.24.0.1:6789,172.24.0.2:6789,172.24.0.3:6789"
# cephfs_provisioner_admin_id: admin
# cephfs_provisioner_secret: secret
# cephfs_provisioner_storage_class: cephfs
# cephfs_provisioner_reclaim_policy: Delete
# cephfs_provisioner_claim_root: /volumes
# cephfs_provisioner_deterministic_names: true
add RBD Provisioner Addon (#3667) (#3668) Based on the CephFS Provisioner Addon, the following changes have been made: - Upstream v2.1.1-k8s1.11 - Configurable Provisioner replicas
2019-04-17 06:14:02 +00:00
# RBD provisioner deployment
rbd_provisioner_enabled: false
# rbd_provisioner_namespace: rbd-provisioner
# rbd_provisioner_replicas: 2
# rbd_provisioner_monitors: "172.24.0.1:6789,172.24.0.2:6789,172.24.0.3:6789"
# rbd_provisioner_pool: kube
# rbd_provisioner_admin_id: admin
# rbd_provisioner_secret_name: ceph-secret-admin
# rbd_provisioner_secret: ceph-key-admin
# rbd_provisioner_user_id: kube
# rbd_provisioner_user_secret_name: ceph-secret-user
# rbd_provisioner_user_secret: ceph-key-user
# rbd_provisioner_user_secret_namespace: rbd-provisioner
# rbd_provisioner_fs_type: ext4
# rbd_provisioner_image_format: "2"
# rbd_provisioner_image_features: layering
# rbd_provisioner_storage_class: rbd
# rbd_provisioner_reclaim_policy: Delete
Split group-variables
2018-08-31 14:05:45 +00:00
# Nginx ingress controller deployment
ingress_nginx_enabled: false
# ingress_nginx_host_network: false
Add ability to setup virtual ip for ingress-controller (#5044)
2019-08-07 02:24:50 +00:00
ingress_publish_status_address: ""
Split group-variables
2018-08-31 14:05:45 +00:00
# ingress_nginx_nodeselector:
Cleanup deprecated labels beta.kubernetes.io/arch and beta.kubernetes.io/os (#5964)
2020-04-17 12:51:06 +00:00
# kubernetes.io/os: "linux"
Add support to set tolerations for ingress-nginx (#3742) Introduced variable `ingress_nginx_tolerations` to set custom tolerations for Ingress nginx daemonset, to be able to schedule ingress-nginx on dedicated nodes with taints.
2018-11-27 11:30:16 +00:00
# ingress_nginx_tolerations:
Revert "Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels (#4320)" (#4553) This reverts commit 586ad89d50d3900b8e2de98086bf5d982c20e5f6.
2019-04-17 14:58:06 +00:00
# - key: "node-role.kubernetes.io/master"
Add support to set tolerations for ingress-nginx (#3742) Introduced variable `ingress_nginx_tolerations` to set custom tolerations for Ingress nginx daemonset, to be able to schedule ingress-nginx on dedicated nodes with taints.
2018-11-27 11:30:16 +00:00
# operator: "Equal"
Fix kubeadm v1beta1 configuration taint (#3928) * Use master node taint same as kubeadm configuration v1alpha3 or before.
2019-01-03 11:42:23 +00:00
# value: ""
Add support to set tolerations for ingress-nginx (#3742) Introduced variable `ingress_nginx_tolerations` to set custom tolerations for Ingress nginx daemonset, to be able to schedule ingress-nginx on dedicated nodes with taints.
2018-11-27 11:30:16 +00:00
# effect: "NoSchedule"
Split group-variables
2018-08-31 14:05:45 +00:00
# ingress_nginx_namespace: "ingress-nginx"
# ingress_nginx_insecure_port: 80
# ingress_nginx_secure_port: 443
# ingress_nginx_configmap:
# map-hash-bucket-size: "128"
# ssl-protocols: "SSLv2"
# ingress_nginx_configmap_tcp_services:
# 9000: "default/example-go:8080"
# ingress_nginx_configmap_udp_services:
Minor cleanups of CoreDNS issues and CI job (#4719) * Minor cleanups * Add comment in docs that nodelocaldns cache is enabled by default
2019-05-07 20:20:36 +00:00
# 53: "kube-system/coredns:53"
Pass `ingress_nginx_extra_args` when deploying the nginx-ingress addon (#5321)
2019-11-11 11:51:41 +00:00
# ingress_nginx_extra_args:
# - --default-ssl-certificate=default/foo-tls
Split group-variables
2018-08-31 14:05:45 +00:00
Add AWS ALB Ingress Controller (#5489) * Add AWS ALB Ingress Controller Ansible role * remove trailing spaces * update owners * ALB ingress: update rbac clusterrole and remove role * Move alb-ingress role to roles/kubernetes-apps/ingress_controller folder
2020-03-16 09:58:35 +00:00
# ALB ingress controller deployment
ingress_alb_enabled: false
# alb_ingress_aws_region: "us-east-1"
# alb_ingress_restrict_scheme: "false"
# Enables logging on all outbound requests sent to the AWS API.
# If logging is desired, set to true.
# alb_ingress_aws_debug: "false"
Split group-variables
2018-08-31 14:05:45 +00:00
# Cert manager deployment
cert_manager_enabled: false
# cert_manager_namespace: "cert-manager"
Reference in a new issue Copy permalink