Devin Buhl
df642e5425
* feat: update jinja delimiters back to default Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: remove cert-manager promrules Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update talos csr approver Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
40 lines
1.3 KiB
YAML
40 lines
1.3 KiB
YAML
---
|
|
k3s_control_node: true
|
|
k3s_server:
|
|
{% if feature_gates.dual_stack_ipv4_first %}
|
|
cluster-cidr: "{{ cluster.pod_network.split(',')[0] }},{{ cluster.pod_network.split(',')[1] }}"
|
|
service-cidr: "{{ cluster.service_network.split(',')[0] }},{{ cluster.service_network.split(',')[1] }}"
|
|
{% else %}
|
|
cluster-cidr: "{{ cluster.pod_network }}"
|
|
service-cidr: "{{ cluster.service_network }}"
|
|
{% endif %}
|
|
disable: ["flannel", "local-storage", "metrics-server", "servicelb", "traefik"]
|
|
disable-cloud-controller: true
|
|
disable-kube-proxy: true
|
|
disable-network-policy: true
|
|
docker: false
|
|
etcd-expose-metrics: true
|
|
flannel-backend: "none"
|
|
kube-apiserver-arg:
|
|
- "anonymous-auth=true"
|
|
kube-controller-manager-arg:
|
|
- "bind-address=0.0.0.0"
|
|
kube-scheduler-arg:
|
|
- "bind-address=0.0.0.0"
|
|
kubelet-arg:
|
|
- "image-gc-high-threshold=55"
|
|
- "image-gc-low-threshold=50"
|
|
{% if feature_gates.dual_stack_ipv4_first %}
|
|
node-ip: "{% raw %}{{ ansible_host }}{% endraw %},{% raw %}{{ ansible_default_ipv6.address }}{% endraw %}"
|
|
{% else %}
|
|
node-ip: "{% raw %}{{ ansible_host }}{% endraw %}"
|
|
{% endif %}
|
|
pause-image: registry.k8s.io/pause:3.9
|
|
secrets-encryption: true
|
|
tls-san:
|
|
- "{{ cluster.endpoint_vip }}"
|
|
{% for item in cluster.tls_sans %}
|
|
- "{{ item }}"
|
|
{% endfor %}
|
|
write-kubeconfig-mode: "644"
|