C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
c12s-kubespray/roles/kubernetes-apps/ansible/defaults/main.yml

75 lines
2.2 KiB
YAML
Raw Normal View History

Adding yamllinter to ci steps (#1556) * Adding yaml linter to ci check * Minor linting fixes from yamllint * Changing CI to install python pkgs from requirements.txt - adding in a secondary requirements.txt for tests - moving yamllint to tests requirements
2017-08-24 09:09:52 +00:00
---
Remove kubedns and dnsmasq. Move dns_late phase after apps (#4406) Both kubedns and dnsmasq modes are long not maintained. We should run dns_late steps at the end because sshd makes DNS lookups during Ansible run and has 2s timeouts for each failed lookup trying to connect to coredns before it is ready.
2019-04-01 19:32:34 +00:00
# Limits for coredns
Tune dnsmasq/kubedns limits, replicas, logging * Add dns_replicas, dns_memory/cpu_limit/requests vars for dns related apps. * When kube_log_level=4, log dnsmasq queries as well. * Add log level control for skydns (part of kubedns app). * Add limits/requests vars for dnsmasq (part of kubedns app) and dnsmasq daemon set. * Drop string defaults for kube_log_level as it is int and is defined in the global vars as well. * Add docs Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-11-25 10:33:39 +00:00
dns_memory_limit: 170Mi
Make kubedns up to date Update kube-dns version to 1.14.2 https://github.com/kubernetes/kubernetes/pull/45684
2017-06-22 08:05:37 +00:00
dns_cpu_requests: 100m
dns_memory_requests: 70Mi
Enable DNS AutoScaler for CoreDNS (#3707) * Enable AutoScaler for CoreDNS * Only use one template for dns autoscaler * Rename a few variables for replicas and minimum pods * Rename a few variables for replicas and minimum pods * Remove replicas to make autoscale work * Cleanup kubedns-autoscaler as it has been renamed
2018-11-15 09:28:03 +00:00
dns_min_replicas: 2
Use recommended defaults for dns autoscale (#3884)
2018-12-12 13:05:46 +00:00
dns_nodes_per_replica: 16
dns_cores_per_replica: 256
Cleanup defaults file from kubernetes-apps and add dashboard to download role (#3800) * Remove variables defined in download role. Fixes #3799 * Cleanup some more variables * Fix bad templating * Minor fix * Add dashboard to download role. Fixes #3736
2018-12-03 18:29:42 +00:00
dns_prevent_single_point_failure: "{{ 'true' if dns_min_replicas|int > 1 else 'false' }}"
Fixes #6740: Allow disabling reverse DNS lookups in coredns (#6741) * created variable to enable/disable reverse dns lookups in coredns * fixed linting-error in dns-stack.md
2020-09-25 09:33:11 +00:00
enable_coredns_reverse_dns_lookups: true
Reduce jinja2 filters in coredns templates (#4390)
2019-03-26 18:09:17 +00:00
coredns_ordinal_suffix: ""
CoreDNS deployment extra tolerations (#5364) * Add extra tolerations for coredns * dns_extra_tolerations option * dns_extra_tolerations * missing starting space in comment
2019-11-27 13:49:21 +00:00
# dns_extra_tolerations: [{effect: NoSchedule, operator: "Exists"}]
Add nodeSelctor for other services and node labels before CNI setup (#7613)
2021-05-25 20:40:43 +00:00
coredns_deployment_nodeselector: "kubernetes.io/os: linux"
Move CI vars out of gitlab and into var files (#1808)
2017-10-18 16:28:54 +00:00
Add support for running a nodelocal dns cache (#3861) * Add support for running a nodelocal dns cache After encountering dns issues in a cluster I was recently working on I noticed Kubernetes 1.13 introduced support for running a nodelocal dns cache. I believe this can usefull for more people. https://github.com/kubernetes/kubernetes/commit/73b548db06c5e293533344c5b6171e955eac9ff1 https://github.com/kubernetes/enhancements/blob/master/keps/sig-network/0030-nodelocal-dns-cache.md * Add requested changes * Add additional requested changes + documentation * Add requested changes after review * Replace incorrect variable
2018-12-11 01:28:03 +00:00
# nodelocaldns
nodelocaldns_cpu_requests: 100m
nodelocaldns_memory_limit: 170Mi
Add nodeSelctor for other services and node labels before CNI setup (#7613)
2021-05-25 20:40:43 +00:00
nodelocaldns_memory_requests: 70Mi
nodelocaldns_ds_nodeselector: "kubernetes.io/os: linux"
Add support for running a nodelocal dns cache (#3861) * Add support for running a nodelocal dns cache After encountering dns issues in a cluster I was recently working on I noticed Kubernetes 1.13 introduced support for running a nodelocal dns cache. I believe this can usefull for more people. https://github.com/kubernetes/kubernetes/commit/73b548db06c5e293533344c5b6171e955eac9ff1 https://github.com/kubernetes/enhancements/blob/master/keps/sig-network/0030-nodelocal-dns-cache.md * Add requested changes * Add additional requested changes + documentation * Add requested changes after review * Replace incorrect variable
2018-12-11 01:28:03 +00:00
allow dns autoscaler limits to be specified via variables (#6020)
2020-04-29 06:34:25 +00:00
# Limits for dns-autoscaler
dns_autoscaler_cpu_requests: 20m
dns_autoscaler_memory_requests: 10Mi
Add nodeSelctor for other services and node labels before CNI setup (#7613)
2021-05-25 20:40:43 +00:00
dns_autoscaler_deployment_nodeselector: "kubernetes.io/os: linux"
allow dns autoscaler limits to be specified via variables (#6020)
2020-04-29 06:34:25 +00:00
Add advanced net check for DNS K8s app * Add an option to deploy K8s app to test e2e network connectivity and cluster DNS resolve via Kubedns for nethost/simple pods (defaults to false). * Parametrize existing k8s apps templates with kube_namespace and kube_config_dir instead of hardcode. * For CoreOS, ensure nameservers from inventory to be put in the first place to allow hostnet pods connectivity via short names or FQDN and hostnet agents to pass as well, if netchecker deployed. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-09-30 15:23:47 +00:00
# Netchecker
deploy_netchecker: false
netchecker_port: 31081
agent_report_interval: 15
netcheck_namespace: default
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 14:44:44 +00:00
# Limits for netchecker apps
netchecker_agent_cpu_limit: 30m
netchecker_agent_memory_limit: 100M
netchecker_agent_cpu_requests: 15m
netchecker_agent_memory_requests: 64M
netchecker_server_cpu_limit: 100m
netchecker_server_memory_limit: 256M
netchecker_server_cpu_requests: 50m
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines
2017-02-27 16:53:43 +00:00
netchecker_server_memory_requests: 64M
netchecker: update images to 1.2.2 from Mirantis (#8074) * netchecker: update images to 1.2.2 from Mirantis which is slightly less ancinet than the l23networks images * Netchecker: use local etcd instead of kubernetes v1beta1 crds which are no longer suported by kube 1.22+
2021-10-19 17:17:04 +00:00
netchecker_etcd_cpu_limit: 200m
netchecker_etcd_memory_limit: 256M
netchecker_etcd_cpu_requests: 100m
netchecker_etcd_memory_requests: 128M
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 14:44:44 +00:00
psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true
2018-08-22 16:16:13 +00:00
# SecurityContext when PodSecurityPolicy is enabled
netchecker_agent_user: 1000
netchecker_server_user: 1000
netchecker_agent_group: 1000
netchecker_server_group: 1000
Add kube dashboard, enabled by default (#1643) * Add kube dashboard, enabled by default Also add rbac role for kube user * Update main.yml
2017-09-09 20:38:03 +00:00
# Dashboard
Adding ability to override dashboard replica count (#4344)
2019-03-13 20:58:25 +00:00
dashboard_replicas: 1
Add kube dashboard, enabled by default (#1643) * Add kube dashboard, enabled by default Also add rbac role for kube user * Update main.yml
2017-09-09 20:38:03 +00:00
Disable dashboard by default (#6804) Users should opt in for features and not opt out.
2020-10-11 15:06:47 +00:00
# Namespace for dashboard
bump to dashboard 2.0.0 with metrics scrapper support (#5821) * bump to dashboard 2.0 rc6 with metrics scrapper * fix missing yaml seperator making Replicaset complaining about missing ServiceAccount * unwanted legay gross hack forgot to remove before * no need namespace on CrBinding * bump to 2.0.0 release * remove dashboard_metrics_scrapper_enabled
2020-04-25 10:55:28 +00:00
dashboard_namespace: kube-system
Add kube dashboard, enabled by default (#1643) * Add kube dashboard, enabled by default Also add rbac role for kube user * Update main.yml
2017-09-09 20:38:03 +00:00
# Limits for dashboard
dashboard_cpu_limit: 100m
dashboard_memory_limit: 256M
dashboard_cpu_requests: 50m
dashboard_memory_requests: 64M
Add RBAC to binding Dahsboard UI
2017-12-18 15:07:19 +00:00
# Set dashboard_use_custom_certs to true if overriding dashboard_certs_secret_name with a secret that
# contains dashboard_tls_key_file and dashboard_tls_cert_file instead of using the initContainer provisioned certs
dashboard_use_custom_certs: false
dashboard_certs_secret_name: kubernetes-dashboard-certs
dashboard_tls_key_file: dashboard.key
dashboard_tls_cert_file: dashboard.crt
Add master toleration flag in dashboard deployment (#4290)
2019-02-26 03:34:47 +00:00
dashboard_master_toleration: true
Add RBAC to binding Dahsboard UI
2017-12-18 15:07:19 +00:00
dashboard_token_ttl option override possibility with default
2018-07-13 13:26:18 +00:00
# Override dashboard default settings
token-ttl default value is int in seconds
2018-07-19 10:15:47 +00:00
dashboard_token_ttl: 900
Add support for --enable-skip-login in Dashboard (#4265)
2019-02-20 07:24:29 +00:00
dashboard_skip_login: false
Reference in a new issue Copy permalink