mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-10-30 06:13:29 -02:30
84 lines
2.9 KiB
YAML
84 lines
2.9 KiB
YAML
---
|
|
# Internal version manipulation tooling
|
|
|
|
# Get kubernetes major version (i.e. 1.17.4 => 1.17)
|
|
kube_major_version: "{{ (kube_version | split('.'))[:-1] | join('.') }}"
|
|
kube_next: "{{ ((kube_version | split('.'))[1] | int) + 1 }}"
|
|
kube_major_next_version: "1.{{ kube_next }}"
|
|
|
|
pod_infra_supported_versions:
|
|
'1.37': '3.10.2'
|
|
'1.36': '3.10.2'
|
|
'1.35': '3.10.1'
|
|
|
|
etcd_supported_versions:
|
|
'1.37': "{{ (etcd_binary_checksums['amd64'].keys() | select('version', '3.8', '<'))[0] }}"
|
|
'1.36': "{{ (etcd_binary_checksums['amd64'].keys() | select('version', '3.7', '<'))[0] }}"
|
|
'1.35': "{{ (etcd_binary_checksums['amd64'].keys() | select('version', '3.7', '<'))[0] }}"
|
|
|
|
# Kubespray constants
|
|
|
|
kube_proxy_deployed: "{{ 'addon/kube-proxy' not in kubeadm_init_phases_skip }}"
|
|
|
|
# Sysctl floors: only applied when the node's current value is lower than
|
|
# the desired one, so pre-tuned images and newer kernels are not regressed.
|
|
# Values are aligned with OpenShift Node Tuning Operator and kops, and
|
|
# are outside the kubelet protect-kernel-defaults validation list.
|
|
sysctl_minimum_values:
|
|
fs.inotify.max_user_instances: 8192
|
|
fs.inotify.max_user_watches: 65536
|
|
kernel.pid_max: 4194304
|
|
fs.aio-max-nr: 1048576
|
|
vm.max_map_count: 262144
|
|
net.netfilter.nf_conntrack_max: 1048576
|
|
net.core.somaxconn: 32768
|
|
net.core.netdev_max_backlog: 16384
|
|
fs.file-max: 2097152
|
|
net.ipv4.neigh.default.gc_thresh1: 8192
|
|
net.ipv4.neigh.default.gc_thresh2: 32768
|
|
net.ipv4.neigh.default.gc_thresh3: 65536
|
|
net.ipv6.neigh.default.gc_thresh1: 8192
|
|
net.ipv6.neigh.default.gc_thresh2: 32768
|
|
net.ipv6.neigh.default.gc_thresh3: 65536
|
|
|
|
# The lowest version allowed to upgrade from (same as calico_version in the previous branch)
|
|
calico_min_version_required: "3.27.0"
|
|
|
|
containerd_min_version_required: "1.3.7"
|
|
|
|
# mixed kube_service_addresses/kube_service_addresses_ipv6 for a variety of network stacks(dualstack, ipv6only, ipv4only)
|
|
kube_service_subnets: >-
|
|
{%- if ipv4_stack and ipv6_stack -%}
|
|
{{ kube_service_addresses }},{{ kube_service_addresses_ipv6 }}
|
|
{%- elif ipv4_stack -%}
|
|
{{ kube_service_addresses }}
|
|
{%- else -%}
|
|
{{ kube_service_addresses_ipv6 }}
|
|
{%- endif -%}
|
|
|
|
# mixed kube_pods_subnet/kube_pods_subnet_ipv6 for a variety of network stacks(dualstack, ipv6only, ipv4only)
|
|
kube_pods_subnets: >-
|
|
{%- if ipv4_stack and ipv6_stack -%}
|
|
{{ kube_pods_subnet }},{{ kube_pods_subnet_ipv6 }}
|
|
{%- elif ipv4_stack -%}
|
|
{{ kube_pods_subnet }}
|
|
{%- else -%}
|
|
{{ kube_pods_subnet_ipv6 }}
|
|
{%- endif -%}
|
|
|
|
local_volume_provisioner_storage_classes_default:
|
|
- key: "{{ local_volume_provisioner_storage_class }}"
|
|
value:
|
|
hostDir: "{{ local_volume_provisioner_base_dir }}"
|
|
mountDir: "{{ local_volume_provisioner_mount_dir }}"
|
|
volumeMode: Filesystem
|
|
fsType: ext4
|
|
|
|
ssl_ca_dirs_per_os_family:
|
|
Debian: &usr_share
|
|
- /usr/share/ca-certificates
|
|
Flatcar: *usr_share
|
|
RedHat:
|
|
- /etc/pki/tls
|
|
- /etc/pki/ca-trust
|