infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity

chore: update addons and config file comments

Browse Source 
Signed-off-by: Devin Buhl <devin@buhl.casa>
This commit is contained in:
Devin Buhl committed 2024-01-22 19:28:33 -05:00
1 parent 83118cfec3
commit a7f6d6a094
2 files changed
+71 -63
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

bootstrap/vars/config.sample.yaml
+26 -18
View File
@@ -14,13 +14,12 @@ bootstrap_github_repository_name:
bootstrap_age_public_key:
# Choose your timezone (e.g. America/New_York)
bootstrap_timezone: Etc/UTC
# Email you want to be associated with the ACME account (used for TLS certificates via letsencrypt.org)
# Email you want to be associated with the ACME account (used for TLS certs via letsencrypt.org)
bootstrap_acme_email:
# Use the ACME production env when requesting the wildcard certificate,
# the default here is `false` which means ACME staging env will be used instead.
# This is to prevent being rate-limited. Update this option to `true` when you
# have verified the staging certificate works and then re-run `task configure`
# and push your changes to Github.
# Use the ACME production env when requesting the wildcard certificate.
# By default the ACME staging server is used. This is to prevent being rate-limited.
# Update this option to `true` when you have verified the staging certificate
# works and then re-run `task configure` and push your changes to Github.
bootstrap_acme_production_enabled: false
# Flux github webhook token (openssl rand -hex 12)
@@ -28,7 +27,7 @@ bootstrap_flux_github_webhook_token:
# Cloudflare domain
bootstrap_cloudflare_domain:
# Cloudflare API Token (not API Key)
# Cloudflare API Token (NOT API Key)
bootstrap_cloudflare_token:
# Cloudflared Account Tag (cat ~/.cloudflared/*.json | jq -r .AccountTag)
bootstrap_cloudflare_account_tag:
@@ -40,16 +39,21 @@ bootstrap_cloudflare_tunnel_id:
# CIDR your nodes are on (e.g. 192.168.1.0/24)
bootstrap_node_cidr:
# The IP address of the Kube API, choose an available IP in your nodes network that is not being used. This is announced over L2.
# The IP address of the Kube API, choose an available IP in your nodes
# network that is NOT being used. This is announced over L2.
bootstrap_kube_api_addr:
# The Load balancer IP for k8s_gateway, choose an available IP in your nodes network that is not being used. This is announced over L2.
# The Load balancer IP for k8s_gateway, choose an available IP in your nodes
# network that is NOT being used. This is announced over L2.
bootstrap_k8s_gateway_addr:
# The Load balancer IP for external ingress, choose an available IP in your nodes network that is not being used. This is announced over L2.
# The Load balancer IP for external ingress, choose an available IP in your nodes
# network that is NOT being used. This is announced over L2.
bootstrap_external_ingress_addr:
# The Load balancer IP for internal ingress, choose an available IP in your nodes network that is not being used. This is announced over L2.
# The Load balancer IP for internal ingress, choose an available IP in your nodes
# network that is NOT being used. This is announced over L2.
bootstrap_internal_ingress_addr:
# Add additional SANs to the Kube API cert, this is useful if you want to call the Kube API by hostname rather than IP
# Add additional SANs to the Kube API cert, this is useful if you want
# to call the Kube API by hostname rather than IP
bootstrap_kube_additional_tls_sans: []
# The DNS server to use for the cluster, this can be an existing local DNS server or a public one
@@ -59,11 +63,11 @@ bootstrap_kube_additional_tls_sans: []
# 3. you are not force redirecting DNS requests to it - this will break cert generation over DNS01
bootstrap_dns_server: 1.1.1.1
# The pod CIDR for the cluster, this must not overlap with any existing networks
# If you want to use IPv6 check the advanced flags below
# The pod CIDR for the cluster, this must NOT overlap with any existing networks
# If you want to use IPv6 check the advanced flags below
bootstrap_cluster_cidr: 10.42.0.0/16
# The service CIDR for the cluster, this must not overlap with any existing networks
# If you want to use IPv6 check the advanced flags below
# The service CIDR for the cluster, this must NOT overlap with any existing networks
# If you want to use IPv6 check the advanced flags below
bootstrap_service_cidr: 10.43.0.0/16
# Node information
@@ -75,7 +79,7 @@ bootstrap_nodes:
# username: # ssh username of the master node
# diskSerial: # (Required: Talos) Serial number of Disk for this master node
# ...
worker: # set to [] or omit if no workers are needed
worker: # set to [] or omit if no workers are needed
# - name: # name or hostname of the worker node (must match [a-z0-9-\.]+)
# address: # ip address of the worker node
# username: # ssh username of the worker node
@@ -88,17 +92,21 @@ bootstrap_nodes:
#
# bootstrap_advanced_flags:
# # Github repository branch
# # Change the default Github repository branch
# github_repository_branch: main
#
# # Disable to prevent changes to nodes /etc/resolv.conf
# update_resolv_conf: true
#
# # Cilium load balancer mode, choose either 'dsr' or 'snat'
# # Due to unknown reasons some people need this set to 'snat' in order
# # for Cilium L2 announcements to work properly. Keep this dsr unless
# # you have issues with connecting to Cilium L2 announcements.
# cilium_loadbalancer_mode: dsr
#
# # Path for openebs openebs-hostpath to use for storage on ALL nodes
# local_storage_path: /var/openebs/local
#
# # Enable Dual Stack IPv4 first
# # IMPORTANT: I am looking for people to help maintain IPv6 support since I cannot test it.
# # https://github.com/onedr0p/flux-cluster-template/issues/1148