2018-11-27 16:00:45 +08:00
|
|
|
|
# 'deploy' node, which the ansible-playbooks usually run on
|
|
|
|
|
|
# variable 'NTP_ENABLED(=yes/no)' enables/disables the NTP server 'chrony'
|
|
|
|
|
|
[deploy]
|
|
|
|
|
|
192.168.1.1 NTP_ENABLED=no
|
|
|
|
|
|
|
|
|
|
|
|
# 'etcd' cluster must have odd member(s) (1,3,5,...)
|
|
|
|
|
|
# variable 'NODE_NAME' is the distinct name of a member in 'etcd' cluster
|
|
|
|
|
|
[etcd]
|
|
|
|
|
|
192.168.1.1 NODE_NAME=etcd1
|
|
|
|
|
|
192.168.1.2 NODE_NAME=etcd2
|
|
|
|
|
|
192.168.1.3 NODE_NAME=etcd3
|
|
|
|
|
|
|
|
|
|
|
|
[kube-master]
|
|
|
|
|
|
192.168.1.1
|
|
|
|
|
|
192.168.1.2
|
|
|
|
|
|
|
|
|
|
|
|
# 'loadbalance' node, with 'haproxy+keepalived' installed
|
|
|
|
|
|
[lb]
|
|
|
|
|
|
192.168.1.1 LB_ROLE=backup
|
|
|
|
|
|
192.168.1.2 LB_ROLE=master
|
|
|
|
|
|
|
|
|
|
|
|
[kube-node]
|
|
|
|
|
|
192.168.1.3
|
|
|
|
|
|
192.168.1.4
|
|
|
|
|
|
|
2019-02-07 15:10:49 +08:00
|
|
|
|
# set 'NEW_INSTALL': 'yes' to install a harbor server; 'no' to integrate with existed one
|
|
|
|
|
|
# if not using domian，set 'HARBOR_DOMAIN=""'
|
2018-11-27 16:00:45 +08:00
|
|
|
|
[harbor]
|
|
|
|
|
|
#192.168.1.8 HARBOR_DOMAIN="harbor.yourdomain.com" NEW_INSTALL=no
|
|
|
|
|
|
|
|
|
|
|
|
# group reserved, add new 'kube-master' in it
|
|
|
|
|
|
[new-master]
|
|
|
|
|
|
#192.168.1.5
|
|
|
|
|
|
|
|
|
|
|
|
# group reserved, add new 'kube-node' in it
|
|
|
|
|
|
[new-node]
|
|
|
|
|
|
#192.168.1.xx
|
|
|
|
|
|
|
2019-02-07 15:10:49 +08:00
|
|
|
|
# [optional] loadbalance for services with type 'NodePort'
|
|
|
|
|
|
[ex-lb]
|
|
|
|
|
|
#192.168.1.6 LB_ROLE=backup EX_VIP=192.168.1.250
|
|
|
|
|
|
#192.168.1.7 LB_ROLE=master EX_VIP=192.168.1.250
|
|
|
|
|
|
|
2018-11-27 16:00:45 +08:00
|
|
|
|
[all:vars]
|
|
|
|
|
|
# --------- Main Variables ---------------
|
|
|
|
|
|
# Cluster Deployment Mode: allinone, single-master, multi-master
|
|
|
|
|
|
DEPLOY_MODE=multi-master
|
|
|
|
|
|
|
2019-01-11 14:45:12 +08:00
|
|
|
|
# Versions supported: v1.8, v1.9, v1.10, v1.11, v1.12, v1.13
|
2018-11-27 16:00:45 +08:00
|
|
|
|
K8S_VER="v1.10"
|
|
|
|
|
|
|
|
|
|
|
|
# Cluster's Master IP, generated by 'keepalived' daemon on a 'lb' node here
|
|
|
|
|
|
# 'haproxy' daemon listens on port 8443, directs requests to real apiservers on port 6443
|
|
|
|
|
|
MASTER_IP="192.168.1.10"
|
|
|
|
|
|
KUBE_APISERVER="https://{{ MASTER_IP }}:8443"
|
|
|
|
|
|
|
|
|
|
|
|
# Network plugins supported: calico, flannel, kube-router, cilium
|
|
|
|
|
|
CLUSTER_NETWORK="flannel"
|
|
|
|
|
|
|
|
|
|
|
|
# K8S Service CIDR, not overlap with node(host) networking
|
|
|
|
|
|
SERVICE_CIDR="10.68.0.0/16"
|
|
|
|
|
|
|
|
|
|
|
|
# Cluster CIDR (Pod CIDR), not overlap with node(host) networking
|
|
|
|
|
|
CLUSTER_CIDR="172.20.0.0/16"
|
|
|
|
|
|
|
|
|
|
|
|
# NodePort Range
|
|
|
|
|
|
NODE_PORT_RANGE="20000-40000"
|
|
|
|
|
|
|
|
|
|
|
|
# Kubernetes SVC IP (usually assigned with the first available IP of 'SERVICE_CIDR')
|
|
|
|
|
|
CLUSTER_KUBERNETES_SVC_IP="10.68.0.1"
|
|
|
|
|
|
|
|
|
|
|
|
# Cluster DNS Server's IP (assigned with an available IP of 'SERVICE_CIDR')
|
|
|
|
|
|
CLUSTER_DNS_SVC_IP="10.68.0.2"
|
|
|
|
|
|
|
|
|
|
|
|
# Cluster DNS Domain
|
|
|
|
|
|
CLUSTER_DNS_DOMAIN="cluster.local."
|
|
|
|
|
|
|
|
|
|
|
|
# Basic auth for apiserver
|
|
|
|
|
|
BASIC_AUTH_USER="admin"
|
|
|
|
|
|
BASIC_AUTH_PASS="test1234"
|
|
|
|
|
|
|
|
|
|
|
|
# -------- Additional Variables --------------------
|
|
|
|
|
|
# Binaries Directory
|
|
|
|
|
|
bin_dir="/opt/kube/bin"
|
|
|
|
|
|
|
|
|
|
|
|
# CA and other components cert/key Directory
|
|
|
|
|
|
ca_dir="/etc/kubernetes/ssl"
|
|
|
|
|
|
|
|
|
|
|
|
# Deploy Directory (kubeasz workspace), don't change the default value right now
|
|
|
|
|
|
base_dir="/etc/ansible"
|
