Devin BuhlandManuel Rüger
de0ed1c70a
* feat: smol changes Signed-off-by: Devin Buhl <devin@buhl.casa> * feat!: Rewrite configure script in ansible Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: add comment for real path Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: verification is done Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: do not need net common Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up old comments Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up old comments Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: finish up ansible host generation and more Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: backup/restore sops config between tasks Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up test comments Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: use ansible template on template Signed-off-by: Devin Buhl <devin@buhl.casa> * Update template/vars/config.sample.yaml Co-authored-by: Manuel Rüger <manuel@rueg.eu> * Update template/tasks/verify_cli.yaml * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> * Update README.md Co-authored-by: Manuel Rüger <manuel@rueg.eu> * fix: move bcrypt logic to template Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: derp Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa> Co-authored-by: Manuel Rüger <manuel@rueg.eu>
80 lines
2.2 KiB
YAML
80 lines
2.2 KiB
YAML
---
|
|
# https://docs.k3s.io/helm
|
|
apiVersion: helm.cattle.io/v1
|
|
kind: HelmChart
|
|
metadata:
|
|
name: coredns
|
|
namespace: kube-system
|
|
spec:
|
|
repo: https://coredns.github.io/helm
|
|
chart: coredns
|
|
# renovate: datasource=helm depName=coredns registryUrl=https://coredns.github.io/helm
|
|
version: "1.24.1"
|
|
targetNamespace: kube-system
|
|
bootstrap: true
|
|
valuesContent: |-
|
|
fullnameOverride: coredns
|
|
image:
|
|
repository: registry.k8s.io/coredns/coredns
|
|
tag: v1.10.1
|
|
replicaCount: 1
|
|
service:
|
|
# Choose the 10th IP address from the start of the service-cidr
|
|
clusterIP: {{ k3s_server['service-cidr'] | ansible.utils.nthhost(10) }}
|
|
serviceAccount:
|
|
create: true
|
|
deployment:
|
|
annotations:
|
|
reloader.stakater.com/auto: "true"
|
|
servers:
|
|
- zones:
|
|
- zone: .
|
|
scheme: dns://
|
|
use_tcp: true
|
|
port: 53
|
|
plugins:
|
|
- name: log
|
|
- name: errors
|
|
- name: health
|
|
configBlock: |-
|
|
lameduck 5s
|
|
- name: ready
|
|
- name: kubernetes
|
|
parameters: cluster.local in-addr.arpa ip6.arpa
|
|
configBlock: |-
|
|
pods insecure
|
|
fallthrough in-addr.arpa ip6.arpa
|
|
ttl 30
|
|
- name: prometheus
|
|
parameters: 0.0.0.0:9153
|
|
- name: forward
|
|
parameters: . /etc/resolv.conf
|
|
- name: cache
|
|
parameters: 30
|
|
- name: loop
|
|
- name: reload
|
|
- name: loadbalance
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
tolerations:
|
|
- key: CriticalAddonsOnly
|
|
operator: Exists
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
- key: node-role.kubernetes.io/master
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
topologySpreadConstraints:
|
|
- maxSkew: 1
|
|
topologyKey: kubernetes.io/hostname
|
|
whenUnsatisfiable: DoNotSchedule
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/instance: coredns
|