e40368ae2b
Added CoreDNS to downloads Updated with labels. Should now work without RBAC too Fix DNS settings on hosts Rename CoreDNS service from kube-dns to coredns Add rotate based on http://edgeofsanity.net/rant/2017/12/20/systemd-resolved-is-broken.html Updated docs with CoreDNS info Added labels and fixed minor settings from official yaml file: https://github.com/kubernetes/kubernetes/blob/release-1.9/cluster/addons/dns/coredns.yaml.sed Added a secondary deployment and secondary service ip. This is to mitigate dns timeouts and create high resitency for failures. See discussion at 'https://github.com/coreos/coreos-kubernetes/issues/641#issuecomment-281174806' Set dns list correct. Thanks to @whereismyjetpack Only download KubeDNS or CoreDNS if selected Move dns cleanup to its own file and import tasks based on dns mode Fix install of KubeDNS when dnsmask_kubedns mode is selected Add new dns option coredns_dual for dual stack deployment. Added variable to configure replicas deployed. Updated docs for dual stack deployment. Removed rotate option in resolv.conf. Run DNS manifests for CoreDNS and KubeDNS Set skydns servers on dual stack deployment Use only one template for CoreDNS dual deployment Set correct cluster ip for the dns server
372 lines
14 KiB
YAML
372 lines
14 KiB
YAML
---
|
|
local_release_dir: /tmp
|
|
|
|
# Used to only evaluate vars from download role
|
|
skip_downloads: false
|
|
|
|
# if this is set to true will only download files once. Doesn't work
|
|
# on Container Linux by CoreOS unless the download_localhost is true and localhost
|
|
# is running another OS type. Default compress level is 1 (fastest).
|
|
download_run_once: False
|
|
download_compress: 1
|
|
|
|
# if this is set to true, uses the localhost for download_run_once mode
|
|
# (requires docker and sudo to access docker). You may want this option for
|
|
# local caching of docker images or for Container Linux by CoreOS cluster nodes.
|
|
# Otherwise, uses the first node in the kube-master group to store images
|
|
# in the download_run_once mode.
|
|
download_localhost: False
|
|
|
|
# Always pull images if set to True. Otherwise check by the repo's tag/digest.
|
|
download_always_pull: False
|
|
|
|
# Use the first kube-master if download_localhost is not set
|
|
download_delegate: "{% if download_localhost %}localhost{% else %}{{groups['kube-master'][0]}}{% endif %}"
|
|
|
|
# Versions
|
|
kube_version: v1.9.3
|
|
kubeadm_version: "{{ kube_version }}"
|
|
etcd_version: v3.2.4
|
|
# TODO(mattymo): Move calico versions to roles/network_plugins/calico/defaults
|
|
# after migration to container download
|
|
calico_version: "v2.6.2"
|
|
calico_ctl_version: "v1.6.1"
|
|
calico_cni_version: "v1.11.0"
|
|
calico_policy_version: "v1.0.0"
|
|
calico_rr_version: "v0.4.0"
|
|
flannel_version: "v0.9.1"
|
|
flannel_cni_version: "v0.3.0"
|
|
istio_version: "0.2.6"
|
|
vault_version: 0.8.1
|
|
weave_version: 2.2.0
|
|
pod_infra_version: 3.0
|
|
contiv_version: 1.1.7
|
|
cilium_version: "v1.0.0-rc4"
|
|
|
|
# Download URLs
|
|
istioctl_download_url: "https://storage.googleapis.com/istio-release/releases/{{ istio_version }}/istioctl/istioctl-linux"
|
|
kubeadm_download_url: "https://storage.googleapis.com/kubernetes-release/release/{{ kubeadm_version }}/bin/linux/amd64/kubeadm"
|
|
vault_download_url: "https://releases.hashicorp.com/vault/{{ vault_version }}/vault_{{ vault_version }}_linux_amd64.zip"
|
|
|
|
# Checksums
|
|
istioctl_checksum: fd703063c540b8c0ab943f478c05ab257d88ae27224c746a27d0526ddbf7c370
|
|
kubeadm_checksum: 9ebbb1fbf3a9e72d7df3f0dc02500dc8f957f39489b22cf577498c8a7c6b39b1
|
|
vault_binary_checksum: 3c4d70ba71619a43229e65c67830e30e050eab7a81ac6b28325ff707e5914188
|
|
|
|
# Containers
|
|
etcd_image_repo: "quay.io/coreos/etcd"
|
|
etcd_image_tag: "{{ etcd_version }}"
|
|
flannel_image_repo: "quay.io/coreos/flannel"
|
|
flannel_image_tag: "{{ flannel_version }}"
|
|
flannel_cni_image_repo: "quay.io/coreos/flannel-cni"
|
|
flannel_cni_image_tag: "{{ flannel_cni_version }}"
|
|
calicoctl_image_repo: "quay.io/calico/ctl"
|
|
calicoctl_image_tag: "{{ calico_ctl_version }}"
|
|
calico_node_image_repo: "quay.io/calico/node"
|
|
calico_node_image_tag: "{{ calico_version }}"
|
|
calico_cni_image_repo: "quay.io/calico/cni"
|
|
calico_cni_image_tag: "{{ calico_cni_version }}"
|
|
calico_policy_image_repo: "quay.io/calico/kube-controllers"
|
|
calico_policy_image_tag: "{{ calico_policy_version }}"
|
|
calico_rr_image_repo: "quay.io/calico/routereflector"
|
|
calico_rr_image_tag: "{{ calico_rr_version }}"
|
|
hyperkube_image_repo: "quay.io/coreos/hyperkube"
|
|
hyperkube_image_tag: "{{ kube_version }}_coreos.0"
|
|
pod_infra_image_repo: "gcr.io/google_containers/pause-amd64"
|
|
pod_infra_image_tag: "{{ pod_infra_version }}"
|
|
install_socat_image_repo: "xueshanf/install-socat"
|
|
install_socat_image_tag: "latest"
|
|
netcheck_version: "v1.0"
|
|
netcheck_agent_img_repo: "quay.io/l23network/k8s-netchecker-agent"
|
|
netcheck_agent_tag: "{{ netcheck_version }}"
|
|
netcheck_server_img_repo: "quay.io/l23network/k8s-netchecker-server"
|
|
netcheck_server_tag: "{{ netcheck_version }}"
|
|
weave_kube_image_repo: "weaveworks/weave-kube"
|
|
weave_kube_image_tag: "{{ weave_version }}"
|
|
weave_npc_image_repo: "weaveworks/weave-npc"
|
|
weave_npc_image_tag: "{{ weave_version }}"
|
|
contiv_image_repo: "contiv/netplugin"
|
|
contiv_image_tag: "{{ contiv_version }}"
|
|
contiv_auth_proxy_image_repo: "contiv/auth_proxy"
|
|
contiv_auth_proxy_image_tag: "{{ contiv_version }}"
|
|
cilium_image_repo: "docker.io/cilium/cilium"
|
|
cilium_image_tag: "{{ cilium_version }}"
|
|
|
|
nginx_image_repo: nginx
|
|
nginx_image_tag: 1.13
|
|
dnsmasq_version: 2.78
|
|
dnsmasq_image_repo: "andyshinn/dnsmasq"
|
|
dnsmasq_image_tag: "{{ dnsmasq_version }}"
|
|
kubedns_version: 1.14.8
|
|
kubedns_image_repo: "gcr.io/google_containers/k8s-dns-kube-dns-amd64"
|
|
kubedns_image_tag: "{{ kubedns_version }}"
|
|
coredns_version: 1.1.0
|
|
coredns_image_repo: "docker.io/coredns/coredns"
|
|
coredns_image_tag: "{{ coredns_version }}"
|
|
dnsmasq_nanny_image_repo: "gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64"
|
|
dnsmasq_nanny_image_tag: "{{ kubedns_version }}"
|
|
dnsmasq_sidecar_image_repo: "gcr.io/google_containers/k8s-dns-sidecar-amd64"
|
|
dnsmasq_sidecar_image_tag: "{{ kubedns_version }}"
|
|
dnsmasqautoscaler_version: 1.1.2
|
|
dnsmasqautoscaler_image_repo: "gcr.io/google_containers/cluster-proportional-autoscaler-amd64"
|
|
dnsmasqautoscaler_image_tag: "{{ dnsmasqautoscaler_version }}"
|
|
kubednsautoscaler_version: 1.1.2
|
|
kubednsautoscaler_image_repo: "gcr.io/google_containers/cluster-proportional-autoscaler-amd64"
|
|
kubednsautoscaler_image_tag: "{{ kubednsautoscaler_version }}"
|
|
test_image_repo: busybox
|
|
test_image_tag: latest
|
|
elasticsearch_version: "v2.4.1"
|
|
elasticsearch_image_repo: "gcr.io/google_containers/elasticsearch"
|
|
elasticsearch_image_tag: "{{ elasticsearch_version }}"
|
|
fluentd_version: "1.22"
|
|
fluentd_image_repo: "gcr.io/google_containers/fluentd-elasticsearch"
|
|
fluentd_image_tag: "{{ fluentd_version }}"
|
|
kibana_version: "v4.6.1"
|
|
kibana_image_repo: "gcr.io/google_containers/kibana"
|
|
kibana_image_tag: "{{ kibana_version }}"
|
|
|
|
helm_version: "v2.8.1"
|
|
helm_image_repo: "lachlanevenson/k8s-helm"
|
|
helm_image_tag: "{{ helm_version }}"
|
|
tiller_image_repo: "gcr.io/kubernetes-helm/tiller"
|
|
tiller_image_tag: "{{ helm_version }}"
|
|
vault_image_repo: "vault"
|
|
vault_image_tag: "{{ vault_version }}"
|
|
|
|
downloads:
|
|
netcheck_server:
|
|
enabled: "{{ deploy_netchecker }}"
|
|
container: true
|
|
repo: "{{ netcheck_server_img_repo }}"
|
|
tag: "{{ netcheck_server_tag }}"
|
|
sha256: "{{ netcheck_server_digest_checksum|default(None) }}"
|
|
netcheck_agent:
|
|
enabled: "{{ deploy_netchecker }}"
|
|
container: true
|
|
repo: "{{ netcheck_agent_img_repo }}"
|
|
tag: "{{ netcheck_agent_tag }}"
|
|
sha256: "{{ netcheck_agent_digest_checksum|default(None) }}"
|
|
etcd:
|
|
enabled: true
|
|
container: true
|
|
repo: "{{ etcd_image_repo }}"
|
|
tag: "{{ etcd_image_tag }}"
|
|
sha256: "{{ etcd_digest_checksum|default(None) }}"
|
|
kubeadm:
|
|
enabled: "{{ kubeadm_enabled }}"
|
|
file: true
|
|
version: "{{ kubeadm_version }}"
|
|
dest: "kubeadm"
|
|
sha256: "{{ kubeadm_checksum }}"
|
|
source_url: "{{ kubeadm_download_url }}"
|
|
url: "{{ kubeadm_download_url }}"
|
|
unarchive: false
|
|
owner: "root"
|
|
mode: "0755"
|
|
istioctl:
|
|
enabled: "{{ istio_enabled }}"
|
|
file: true
|
|
version: "{{ istio_version }}"
|
|
dest: "istio/istioctl"
|
|
sha256: "{{ istioctl_checksum }}"
|
|
source_url: "{{ istioctl_download_url }}"
|
|
url: "{{ istioctl_download_url }}"
|
|
unarchive: false
|
|
owner: "root"
|
|
mode: "0755"
|
|
hyperkube:
|
|
enabled: true
|
|
container: true
|
|
repo: "{{ hyperkube_image_repo }}"
|
|
tag: "{{ hyperkube_image_tag }}"
|
|
sha256: "{{ hyperkube_digest_checksum|default(None) }}"
|
|
cilium:
|
|
enabled: "{{ kube_network_plugin == 'cilium' }}"
|
|
container: true
|
|
repo: "{{ cilium_image_repo }}"
|
|
tag: "{{ cilium_image_tag }}"
|
|
sha256: "{{ cilium_digest_checksum|default(None) }}"
|
|
flannel:
|
|
enabled: "{{ kube_network_plugin == 'flannel' or kube_network_plugin == 'canal' }}"
|
|
container: true
|
|
repo: "{{ flannel_image_repo }}"
|
|
tag: "{{ flannel_image_tag }}"
|
|
sha256: "{{ flannel_digest_checksum|default(None) }}"
|
|
flannel_cni:
|
|
enabled: "{{ kube_network_plugin == 'flannel' }}"
|
|
container: true
|
|
repo: "{{ flannel_cni_image_repo }}"
|
|
tag: "{{ flannel_cni_image_tag }}"
|
|
sha256: "{{ flannel_cni_digest_checksum|default(None) }}"
|
|
calicoctl:
|
|
enabled: "{{ kube_network_plugin == 'calico' or kube_network_plugin == 'canal' }}"
|
|
container: true
|
|
repo: "{{ calicoctl_image_repo }}"
|
|
tag: "{{ calicoctl_image_tag }}"
|
|
sha256: "{{ calicoctl_digest_checksum|default(None) }}"
|
|
calico_node:
|
|
enabled: "{{ kube_network_plugin == 'calico' or kube_network_plugin == 'canal' }}"
|
|
container: true
|
|
repo: "{{ calico_node_image_repo }}"
|
|
tag: "{{ calico_node_image_tag }}"
|
|
sha256: "{{ calico_node_digest_checksum|default(None) }}"
|
|
calico_cni:
|
|
enabled: "{{ kube_network_plugin == 'calico' or kube_network_plugin == 'canal' }}"
|
|
container: true
|
|
repo: "{{ calico_cni_image_repo }}"
|
|
tag: "{{ calico_cni_image_tag }}"
|
|
sha256: "{{ calico_cni_digest_checksum|default(None) }}"
|
|
calico_policy:
|
|
enabled: "{{ enable_network_policy or kube_network_plugin == 'canal' }}"
|
|
container: true
|
|
repo: "{{ calico_policy_image_repo }}"
|
|
tag: "{{ calico_policy_image_tag }}"
|
|
sha256: "{{ calico_policy_digest_checksum|default(None) }}"
|
|
calico_rr:
|
|
enabled: "{{ peer_with_calico_rr is defined and peer_with_calico_rr and kube_network_plugin == 'calico' }}"
|
|
container: true
|
|
repo: "{{ calico_rr_image_repo }}"
|
|
tag: "{{ calico_rr_image_tag }}"
|
|
sha256: "{{ calico_rr_digest_checksum|default(None) }}"
|
|
weave_kube:
|
|
enabled: "{{ kube_network_plugin == 'weave' }}"
|
|
container: true
|
|
repo: "{{ weave_kube_image_repo }}"
|
|
tag: "{{ weave_kube_image_tag }}"
|
|
sha256: "{{ weave_kube_digest_checksum|default(None) }}"
|
|
weave_npc:
|
|
enabled: "{{ kube_network_plugin == 'weave' }}"
|
|
container: true
|
|
repo: "{{ weave_npc_image_repo }}"
|
|
tag: "{{ weave_npc_image_tag }}"
|
|
sha256: "{{ weave_npc_digest_checksum|default(None) }}"
|
|
contiv:
|
|
enabled: "{{ kube_network_plugin == 'contiv' }}"
|
|
container: true
|
|
repo: "{{ contiv_image_repo }}"
|
|
tag: "{{ contiv_image_tag }}"
|
|
sha256: "{{ contiv_digest_checksum|default(None) }}"
|
|
contiv_auth_proxy:
|
|
enabled: "{{ kube_network_plugin == 'contiv' }}"
|
|
container: true
|
|
repo: "{{ contiv_auth_proxy_image_repo }}"
|
|
tag: "{{ contiv_auth_proxy_image_tag }}"
|
|
sha256: "{{ contiv_auth_proxy_digest_checksum|default(None) }}"
|
|
pod_infra:
|
|
enabled: true
|
|
container: true
|
|
repo: "{{ pod_infra_image_repo }}"
|
|
tag: "{{ pod_infra_image_tag }}"
|
|
sha256: "{{ pod_infra_digest_checksum|default(None) }}"
|
|
install_socat:
|
|
enabled: "{{ ansible_os_family in ['CoreOS', 'Container Linux by CoreOS'] }}"
|
|
container: true
|
|
repo: "{{ install_socat_image_repo }}"
|
|
tag: "{{ install_socat_image_tag }}"
|
|
sha256: "{{ install_socat_digest_checksum|default(None) }}"
|
|
nginx:
|
|
enabled: true
|
|
container: true
|
|
repo: "{{ nginx_image_repo }}"
|
|
tag: "{{ nginx_image_tag }}"
|
|
sha256: "{{ nginx_digest_checksum|default(None) }}"
|
|
dnsmasq:
|
|
enabled: "{{ dns_mode == 'dnsmasq_kubedns' }}"
|
|
container: true
|
|
repo: "{{ dnsmasq_image_repo }}"
|
|
tag: "{{ dnsmasq_image_tag }}"
|
|
sha256: "{{ dnsmasq_digest_checksum|default(None) }}"
|
|
kubedns:
|
|
enabled: "{{ dns_mode in ['kubedns', 'dnsmasq_kubedns'] }}"
|
|
container: true
|
|
repo: "{{ kubedns_image_repo }}"
|
|
tag: "{{ kubedns_image_tag }}"
|
|
sha256: "{{ kubedns_digest_checksum|default(None) }}"
|
|
coredns:
|
|
enabled: "{{ dns_mode in ['coredns', 'coredns_dual'] }}"
|
|
container: true
|
|
repo: "{{ coredns_image_repo }}"
|
|
tag: "{{ coredns_image_tag }}"
|
|
sha256: "{{ coredns_digest_checksum|default(None) }}"
|
|
dnsmasq_nanny:
|
|
enabled: "{{ dns_mode in ['kubedns', 'dnsmasq_kubedns'] }}"
|
|
container: true
|
|
repo: "{{ dnsmasq_nanny_image_repo }}"
|
|
tag: "{{ dnsmasq_nanny_image_tag }}"
|
|
sha256: "{{ dnsmasq_nanny_digest_checksum|default(None) }}"
|
|
dnsmasq_sidecar:
|
|
enabled: "{{ dns_mode in ['kubedns', 'dnsmasq_kubedns'] }}"
|
|
container: true
|
|
repo: "{{ dnsmasq_sidecar_image_repo }}"
|
|
tag: "{{ dnsmasq_sidecar_image_tag }}"
|
|
sha256: "{{ dnsmasq_sidecar_digest_checksum|default(None) }}"
|
|
kubednsautoscaler:
|
|
enabled: "{{ dns_mode in ['kubedns', 'dnsmasq_kubedns'] }}"
|
|
container: true
|
|
repo: "{{ kubednsautoscaler_image_repo }}"
|
|
tag: "{{ kubednsautoscaler_image_tag }}"
|
|
sha256: "{{ kubednsautoscaler_digest_checksum|default(None) }}"
|
|
testbox:
|
|
enabled: true
|
|
container: true
|
|
repo: "{{ test_image_repo }}"
|
|
tag: "{{ test_image_tag }}"
|
|
sha256: "{{ testbox_digest_checksum|default(None) }}"
|
|
elasticsearch:
|
|
enabled: "{{ efk_enabled }}"
|
|
container: true
|
|
repo: "{{ elasticsearch_image_repo }}"
|
|
tag: "{{ elasticsearch_image_tag }}"
|
|
sha256: "{{ elasticsearch_digest_checksum|default(None) }}"
|
|
fluentd:
|
|
enabled: "{{ efk_enabled }}"
|
|
container: true
|
|
repo: "{{ fluentd_image_repo }}"
|
|
tag: "{{ fluentd_image_tag }}"
|
|
sha256: "{{ fluentd_digest_checksum|default(None) }}"
|
|
kibana:
|
|
enabled: "{{ efk_enabled }}"
|
|
container: true
|
|
repo: "{{ kibana_image_repo }}"
|
|
tag: "{{ kibana_image_tag }}"
|
|
sha256: "{{ kibana_digest_checksum|default(None) }}"
|
|
helm:
|
|
enabled: "{{ helm_enabled }}"
|
|
container: true
|
|
repo: "{{ helm_image_repo }}"
|
|
tag: "{{ helm_image_tag }}"
|
|
sha256: "{{ helm_digest_checksum|default(None) }}"
|
|
tiller:
|
|
enabled: "{{ helm_enabled }}"
|
|
container: true
|
|
repo: "{{ tiller_image_repo }}"
|
|
tag: "{{ tiller_image_tag }}"
|
|
sha256: "{{ tiller_digest_checksum|default(None) }}"
|
|
vault:
|
|
enabled: "{{ cert_management == 'vault' }}"
|
|
container: "{{ vault_deployment_type != 'host' }}"
|
|
file: "{{ vault_deployment_type == 'host' }}"
|
|
dest: "vault/vault_{{ vault_version }}_linux_amd64.zip"
|
|
mode: "0755"
|
|
owner: "vault"
|
|
repo: "{{ vault_image_repo }}"
|
|
sha256: "{{ vault_binary_checksum if vault_deployment_type == 'host' else vault_digest_checksum|d(none) }}"
|
|
source_url: "{{ vault_download_url }}"
|
|
tag: "{{ vault_image_tag }}"
|
|
unarchive: true
|
|
url: "{{ vault_download_url }}"
|
|
version: "{{ vault_version }}"
|
|
|
|
download_defaults:
|
|
container: false
|
|
file: false
|
|
repo: None
|
|
tag: None
|
|
enabled: false
|
|
dest: None
|
|
version: None
|
|
url: None
|
|
unarchive: false
|
|
owner: kube
|
|
mode: None
|