Devin Buhl
afbf097dac
* feat: update kube-vip ansible playbook for k0s and k3s Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update renovate Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: move ipv6 to advanced options Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: kube-vip manifests to partials Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: kube vip samesies Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update config sample Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
44 lines
1.8 KiB
YAML
44 lines
1.8 KiB
YAML
#% if bootstrap_distribution in ['k3s'] %#
|
|
---
|
|
# https://rancher.com/docs/k3s/latest/en/installation/install-options/server-config/
|
|
# https://github.com/PyratLabs/ansible-role-k3s
|
|
k3s_control_node: true
|
|
k3s_server:
|
|
#% if bootstrap_advanced_flags.dual_stack_ipv4_first|default(false) %#
|
|
node-ip: "{{ ansible_host }},{{ ansible_default_ipv6.address }}"
|
|
#% else %#
|
|
node-ip: "{{ ansible_host }}"
|
|
#% endif %#
|
|
tls-san:
|
|
- "#{ bootstrap_kube_api_addr }#"
|
|
#% for item in bootstrap_kube_additional_tls_sans %#
|
|
- "{{ item }}"
|
|
#% endfor %#
|
|
docker: false
|
|
flannel-backend: "none" # quote
|
|
disable: ["flannel", "local-storage", "metrics-server", "servicelb", "traefik"]
|
|
disable-network-policy: true
|
|
disable-cloud-controller: true
|
|
disable-kube-proxy: true
|
|
write-kubeconfig-mode: "644"
|
|
pause-image: registry.k8s.io/pause:3.9
|
|
secrets-encryption: true
|
|
#% if bootstrap_advanced_flags.dual_stack_ipv4_first|default(false) %#
|
|
cluster-cidr: "#{ bootstrap_cluster_cidr.split(',')[0] }#,#{ bootstrap_cluster_cidr.split(',')[1] }#"
|
|
service-cidr: "#{ bootstrap_service_cidr.split(',')[0] }#,#{ bootstrap_service_cidr.split(',')[1] }#"
|
|
#% else %#
|
|
cluster-cidr: "#{ bootstrap_cluster_cidr }#"
|
|
service-cidr: "#{ bootstrap_service_cidr }#"
|
|
#% endif %#
|
|
etcd-expose-metrics: true # Required to monitor etcd with kube-prometheus-stack
|
|
kube-controller-manager-arg:
|
|
- "bind-address=0.0.0.0" # Required to monitor kube-controller-manager with kube-prometheus-stack
|
|
kube-scheduler-arg:
|
|
- "bind-address=0.0.0.0" # Required to monitor kube-scheduler with kube-prometheus-stack
|
|
kube-apiserver-arg:
|
|
- "anonymous-auth=true" # Required for external LB health-checks
|
|
kubelet-arg:
|
|
- "image-gc-high-threshold=55"
|
|
- "image-gc-low-threshold=50"
|
|
#% endif %#
|