mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-10-30 22:16:23 -02:30
Max Gautier
b1b01bc579
Use the upstream keys without converting them to snake case. This avoids converting back to camel case when rendering, and aligns ourselves more with our upstream.
215 lines
6.4 KiB
YAML
215 lines
6.4 KiB
YAML
---
|
|
# Helm deployment
|
|
helm_enabled: false
|
|
|
|
# Registry deployment
|
|
registry_enabled: false
|
|
# registry_namespace: kube-system
|
|
# registry_storage_class: ""
|
|
# registry_disk_size: "10Gi"
|
|
|
|
# Metrics Server deployment
|
|
metrics_server_enabled: false
|
|
# metrics_server_container_port: 10250
|
|
# metrics_server_kubelet_insecure_tls: true
|
|
# metrics_server_metric_resolution: 15s
|
|
# metrics_server_kubelet_preferred_address_types: "InternalIP,ExternalIP,Hostname"
|
|
# metrics_server_host_network: false
|
|
# metrics_server_replicas: 1
|
|
|
|
# Rancher Local Path Provisioner
|
|
local_path_provisioner_enabled: false
|
|
# local_path_provisioner_namespace: "local-path-storage"
|
|
# local_path_provisioner_storage_class: "local-path"
|
|
# local_path_provisioner_reclaim_policy: Delete
|
|
# local_path_provisioner_claim_root: /opt/local-path-provisioner/
|
|
# local_path_provisioner_debug: false
|
|
# local_path_provisioner_image_repo: "{{ docker_image_repo }}/rancher/local-path-provisioner"
|
|
# local_path_provisioner_helper_image_repo: "busybox"
|
|
# local_path_provisioner_helper_image_tag: "latest"
|
|
|
|
# Local volume provisioner deployment
|
|
local_volume_provisioner_enabled: false
|
|
# local_volume_provisioner_namespace: kube-system
|
|
# local_volume_provisioner_nodelabels:
|
|
# - kubernetes.io/hostname
|
|
# - topology.kubernetes.io/region
|
|
# - topology.kubernetes.io/zone
|
|
# local_volume_provisioner_storage_classes:
|
|
# local-storage:
|
|
# hostDir: /mnt/disks
|
|
# mountDir: /mnt/disks
|
|
# volumeMode: Filesystem
|
|
# fsType: ext4
|
|
# fast-disks:
|
|
# hostDir: /mnt/fast-disks
|
|
# mountDir: /mnt/fast-disks
|
|
# blockCleanerCommand:
|
|
# - "/scripts/shred.sh"
|
|
# - "2"
|
|
# volumeMode: Filesystem
|
|
# fsType: ext4
|
|
# local_volume_provisioner_tolerations:
|
|
# - effect: NoSchedule
|
|
# operator: Exists
|
|
|
|
# CSI Volume Snapshot Controller deployment, set this to true if your CSI is able to manage snapshots
|
|
# currently, setting cinder_csi_enabled=true would automatically enable the snapshot controller
|
|
# Longhorn is an external CSI that would also require setting this to true but it is not included in kubespray
|
|
# csi_snapshot_controller_enabled: false
|
|
# csi snapshot namespace
|
|
# snapshot_controller_namespace: kube-system
|
|
|
|
# Gateway API CRDs
|
|
gateway_api_enabled: false
|
|
|
|
# ALB ingress controller deployment
|
|
ingress_alb_enabled: false
|
|
# alb_ingress_aws_region: "us-east-1"
|
|
# alb_ingress_restrict_scheme: "false"
|
|
# Enables logging on all outbound requests sent to the AWS API.
|
|
# If logging is desired, set to true.
|
|
# alb_ingress_aws_debug: "false"
|
|
|
|
# Cert manager deployment
|
|
cert_manager_enabled: false
|
|
# cert_manager_namespace: "cert-manager"
|
|
# cert_manager_tolerations:
|
|
# - key: node-role.kubernetes.io/control-plane
|
|
# effect: NoSchedule
|
|
# cert_manager_affinity:
|
|
# nodeAffinity:
|
|
# preferredDuringSchedulingIgnoredDuringExecution:
|
|
# - weight: 100
|
|
# preference:
|
|
# matchExpressions:
|
|
# - key: node-role.kubernetes.io/control-plane
|
|
# operator: In
|
|
# values:
|
|
# - ""
|
|
# cert_manager_nodeselector:
|
|
# kubernetes.io/os: "linux"
|
|
|
|
# cert_manager_trusted_internal_ca: |
|
|
# -----BEGIN CERTIFICATE-----
|
|
# [REPLACE with your CA certificate]
|
|
# -----END CERTIFICATE-----
|
|
# cert_manager_leader_election_namespace: kube-system
|
|
|
|
# cert_manager_dns_policy: "ClusterFirst"
|
|
# cert_manager_dns_config:
|
|
# nameservers:
|
|
# - "1.1.1.1"
|
|
# - "8.8.8.8"
|
|
|
|
# cert_manager_controller_extra_args:
|
|
# - "--dns01-recursive-nameservers-only=true"
|
|
# - "--dns01-recursive-nameservers=1.1.1.1:53,8.8.8.8:53"
|
|
|
|
# MetalLB deployment
|
|
metallb_enabled: false
|
|
metallb_speaker_enabled: "{{ metallb_enabled }}"
|
|
metallb_namespace: "metallb-system"
|
|
# metallb_protocol: "layer2"
|
|
# metallb_port: "7472"
|
|
# metallb_memberlist_port: "7946"
|
|
# metallb_config:
|
|
# speaker:
|
|
# nodeselector:
|
|
# kubernetes.io/os: "linux"
|
|
# tolerations:
|
|
# - key: "node-role.kubernetes.io/control-plane"
|
|
# operator: "Equal"
|
|
# value: ""
|
|
# effect: "NoSchedule"
|
|
# controller:
|
|
# nodeselector:
|
|
# kubernetes.io/os: "linux"
|
|
# tolerations:
|
|
# - key: "node-role.kubernetes.io/control-plane"
|
|
# operator: "Equal"
|
|
# value: ""
|
|
# effect: "NoSchedule"
|
|
# address_pools:
|
|
# primary:
|
|
# ip_range:
|
|
# - 10.5.0.0/16
|
|
# auto_assign: true
|
|
# pool1:
|
|
# ip_range:
|
|
# - 10.6.0.0/16
|
|
# auto_assign: true
|
|
# pool2:
|
|
# ip_range:
|
|
# - 10.10.0.0/16
|
|
# auto_assign: true
|
|
# layer2:
|
|
# - primary
|
|
# layer3:
|
|
# defaults:
|
|
# peer_port: 179
|
|
# hold_time: 120s
|
|
# communities:
|
|
# vpn-only: "1234:1"
|
|
# NO_ADVERTISE: "65535:65282"
|
|
# metallb_peers:
|
|
# peer1:
|
|
# peer_address: 10.6.0.1
|
|
# peer_asn: 64512
|
|
# my_asn: 4200000000
|
|
# communities:
|
|
# - vpn-only
|
|
# address_pool:
|
|
# - pool1
|
|
# peer2:
|
|
# peer_address: 10.10.0.1
|
|
# peer_asn: 64513
|
|
# my_asn: 4200000000
|
|
# communities:
|
|
# - NO_ADVERTISE
|
|
# address_pool:
|
|
# - pool2
|
|
|
|
argocd_enabled: false
|
|
# argocd_namespace: argocd
|
|
# Default password:
|
|
# - https://argo-cd.readthedocs.io/en/stable/getting_started/#4-login-using-the-cli
|
|
# ---
|
|
# The initial password is autogenerated and stored in `argocd-initial-admin-secret` in the argocd namespace defined above.
|
|
# Using the argocd CLI the generated password can be automatically be fetched from the current kubectl context with the command:
|
|
# argocd admin initial-password -n argocd
|
|
# ---
|
|
# Use the following var to set admin password
|
|
# argocd_admin_password: "password"
|
|
|
|
# The plugin manager for kubectl
|
|
|
|
# Kube VIP
|
|
kube_vip_enabled: false
|
|
# kube_vip_arp_enabled: true
|
|
# kube_vip_controlplane_enabled: true
|
|
# kube_vip_address: 192.168.56.120
|
|
# loadbalancer_apiserver:
|
|
# address: "{{ kube_vip_address }}"
|
|
# port: 6443
|
|
# kube_vip_interface: eth0
|
|
# kube_vip_services_enabled: false
|
|
# kube_vip_dns_mode: first
|
|
# kube_vip_cp_detect: false
|
|
# kube_vip_leasename: plndr-cp-lock
|
|
# kube_vip_enable_node_labeling: false
|
|
# kube_vip_lb_fwdmethod: local
|
|
# kube_vip_bgp_sourceip:
|
|
# kube_vip_bgp_sourceif:
|
|
# kube_vip_metrics_enabled: false
|
|
# kube_vip_metrics_port: 2112
|
|
|
|
# Node Feature Discovery
|
|
node_feature_discovery_enabled: false
|
|
# node_feature_discovery_gc_sa_name: node-feature-discovery
|
|
# node_feature_discovery_gc_sa_create: false
|
|
# node_feature_discovery_worker_sa_name: node-feature-discovery
|
|
# node_feature_discovery_worker_sa_create: false
|
|
# node_feature_discovery_master_config:
|
|
# extraLabelNs: ["nvidia.com"]
|