d093d0a4e1
* ignore idea * Initial work on support for k0s * * Changed config param to bootstrap_distribution * Replaced democratic-csi with openebs * Added notes about system-upgrade-controller being ignored with k0s * Removed password for nodes * * Switched to single storage path for openebs * Removed democratic-csi helm repo * Added missing openebs helm repo * Fixed template formatting * Made bootstrap_private_github_repo hidden/undocumented * Updated flux cluster config to accommodate bootstrap_private_github_repo * * added the storageclass name to be declarative * * added newline * set chart wait false * * fixed spacing in K0sTasks * fixed openebs path * properly added openebs helm repo * * updated configure task to use venv * renamed bootstrap_kube_vip_addr to bootstrap_kubeapi_addr * renamed bootstrap_kube_vip_addr derived variables accordingly * * tweaked configure task cmd * started work on k0s-config.yaml template * * tweaked k0s task cmd * moved coredns under addons rather than optional * fixed typo in coredns task * normalized formatting in k0s-config * disabled telemetry in k0s-config * added renovate to k0s-config * removed tunnel and added routing mode in k0s-config cilium chart values * updated docs in config example * fixed issue with k0s-config controller role so it didn't default to worker+controller if more than one master * * fixed whitespace * add k0sctl to brew tasks * Update bootstrap/vars/config.sample.yaml * Update bootstrap/vars/config.sample.yaml * Update k0s-config.yaml.j2 * Update config.sample.yaml * controllerManager and scheduler bind to `0.0.0.0` for metrics * Update custom-cilium-helmchart.yaml.j2.j2 * Update helmvalues.yaml.j2 * Update bootstrap/tasks/addons/main.yaml * first pass at readme updates * update placement of k0sconfig options * disable telemetry on k0sctl too * disable k0s telemetry in env too * update: jinja spacing in k0sconfig Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: ensure bootstrap_local_storage_path is delete on nuke Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update renovate regex for k3s/k0s Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update nuke playbook and only include k3s task when k3s Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update nuke playbook and only include k3s task when k3s and include jinja comments Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa> Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com> Co-authored-by: Devin Buhl <devin@buhl.casa>
48 lines
2.3 KiB
YAML
48 lines
2.3 KiB
YAML
#jinja2: trim_blocks: True, lstrip_blocks: True
|
|
---
|
|
# https://rancher.com/docs/k3s/latest/en/installation/install-options/server-config/
|
|
# https://github.com/PyratLabs/ansible-role-k3s
|
|
|
|
k3s_control_node: true
|
|
k3s_server:
|
|
{% if bootstrap_ipv6_enabled | default(false) %}
|
|
node-ip: "{% raw %}{{ ansible_host }},{{ ansible_default_ipv6.address }}{% endraw %}"
|
|
{% else %}
|
|
node-ip: "{% raw %}{{ ansible_host }}{% endraw %}"
|
|
{% endif %}
|
|
tls-san:
|
|
- "{% raw %}{{ kubeapi_addr }}{% endraw %}"
|
|
docker: false
|
|
flannel-backend: "none" # This needs to be in quotes
|
|
disable:
|
|
- coredns # Disable coredns - replaced with Coredns Helm Chart
|
|
- flannel # Disable flannel - replaced with Cilium Helm Chart
|
|
- local-storage # Disable local-path-provisioner - replaced with democratic-csi
|
|
- metrics-server # Disable metrics-server - installed with Flux
|
|
- servicelb # Disable servicelb - replaced with Cilium Helm Chart
|
|
- traefik # Disable traefik - replaced with ingress-nginx and installed with Flux
|
|
disable-network-policy: true
|
|
disable-cloud-controller: true
|
|
disable-kube-proxy: true # Cilium uses eBPF
|
|
write-kubeconfig-mode: "644"
|
|
pause-image: registry.k8s.io/pause:3.9
|
|
secrets-encryption: true
|
|
{% if bootstrap_ipv6_enabled | default(false) %}
|
|
cluster-cidr: "{% raw %}{{ cluster_cidr }},{{ cluster_cidr_v6 }}{% endraw %}"
|
|
service-cidr: "{% raw %}{{ service_cidr }},{{ service_cidr_v6 }}{% endraw %}"
|
|
{% else %}
|
|
cluster-cidr: "{% raw %}{{ cluster_cidr }}{% endraw %}"
|
|
service-cidr: "{% raw %}{{ service_cidr }}{% endraw %}"
|
|
{% endif %}
|
|
etcd-expose-metrics: true # Required to monitor etcd with kube-prometheus-stack
|
|
kube-controller-manager-arg:
|
|
- "bind-address=0.0.0.0" # Required to monitor kube-controller-manager with kube-prometheus-stack
|
|
kube-scheduler-arg:
|
|
- "bind-address=0.0.0.0" # Required to monitor kube-scheduler with kube-prometheus-stack
|
|
kube-apiserver-arg:
|
|
- "anonymous-auth=true" # Required for HAProxy health-checks
|
|
# TODO: Move these options to a kubelet config file
|
|
kubelet-arg:
|
|
- "image-gc-high-threshold=55"
|
|
- "image-gc-low-threshold=50"
|