64 lines
2.6 KiB
YAML
64 lines
2.6 KiB
YAML
---
|
|
#
|
|
# Bootstrap configuration - config.yaml is gitignored
|
|
#
|
|
|
|
# Github username (e.g. onedr0p)
|
|
bootstrap_github_username:
|
|
# Github repository (e.g. flux-cluster-template)
|
|
bootstrap_github_repository_name:
|
|
# Age Public Key (e.g. age15uzrw396e67z9wdzsxzdk7ka0g2gr3l460e0slaea563zll3hdfqwqxdta)
|
|
bootstrap_age_public_key:
|
|
# Choose your timezone (e.g. America/New_York)
|
|
bootstrap_timezone: Etc/UTC
|
|
# Email you want to be associated with the ACME account (used for TLS certificates via letsencrypt.org)
|
|
bootstrap_acme_email:
|
|
# Use ACME production servers when requesting the wildcard certificate
|
|
# The default here is `false` which means ACME staging certs will be used instead
|
|
# This is to prevent being rate-limited. Update this option to `true` when you
|
|
# have verified the staging certificate works and then re-run `task configure`
|
|
# and push your changes to Github.
|
|
bootstrap_acme_enable_production_certs: false
|
|
|
|
# Flux github webhook token (openssl rand -hex 12)
|
|
bootstrap_flux_github_webhook_token:
|
|
|
|
# Cloudflare domain
|
|
bootstrap_cloudflare_domain:
|
|
# Cloudflare API Token (not API Key)
|
|
bootstrap_cloudflare_token:
|
|
# Cloudflared Account Tag (cat ~/.cloudflared/*.json | jq -r .AccountTag)
|
|
bootstrap_cloudflare_account_tag:
|
|
# Cloudflared Tunnel Secret (cat ~/.cloudflared/*.json | jq -r .TunnelSecret)
|
|
bootstrap_cloudflare_tunnel_secret:
|
|
# Cloudflared Tunnel ID (cat ~/.cloudflared/*.json | jq -r .TunnelID)
|
|
bootstrap_cloudflare_tunnel_id:
|
|
|
|
# CIDR your nodes are on (e.g. 192.168.1.0/24)
|
|
bootstrap_node_cidr:
|
|
# The IP address to use with kube-vip, choose an available IP in your nodes network that is not being used
|
|
bootstrap_kube_vip_addr:
|
|
# The Load balancer IP for k8s_gateway, choose an available IP in your nodes network that is not being used
|
|
bootstrap_k8s_gateway_addr:
|
|
# The Load balancer IP for ingress-nginx, choose an available IP in your nodes network that is not being used
|
|
bootstrap_ingress_nginx_addr:
|
|
# Choose your cluster and service cidrs, leave these unchanged unless you know what you are doing
|
|
bootstrap_cluster_cidr: 10.42.0.0/16
|
|
bootstrap_service_cidr: 10.43.0.0/16
|
|
|
|
# Node information
|
|
bootstrap_nodes:
|
|
# Use only 1, 3 or more odd master nodes, recommended is 3
|
|
master:
|
|
# - name: # name of the master node (must match [a-z0-9-]+)
|
|
# address: # ip address of the master node
|
|
# username: # ssh username of the master node
|
|
# password: # password of ssh username for the master node
|
|
# ...
|
|
worker:
|
|
# - name: # name of the worker node (must match [a-z0-9-]+)
|
|
# address: # ip address of the worker node
|
|
# username: # ssh username of the worker node
|
|
# password: # password of ssh username for the worker node
|
|
# ...
|