kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/roles/network_plugin/calico/defaults/main.yml

54 lines
1.8 KiB
YAML
Raw Normal View History

split network plugins into distinct roles
2016-01-30 23:04:47 +08:00
---
calico: enabling nat outgoing by default
2016-02-21 19:42:23 +08:00
# Enables Internet connectivity from containers
nat_outgoing: true
choose between gce and aws cloud providers
2016-03-24 00:27:06 +08:00
Support --ipip option for calico pool Adds new boolean configuration variable for calico network plugin `ipip`. When it's enabled calico pool is created with '--ipip' option (IP-over-IP encapsulation across hosts). Also refactor pool creation tasks to simplify logic and make tasks more readable.
2016-07-21 19:05:40 +08:00
# Use IP-over-IP encapsulation across hosts
updated to direct control over ipip
2017-06-23 15:16:05 +08:00
ipip: true
Allow calico ipPool to be created with mode "cross-subnet"
2017-07-05 07:05:16 +08:00
ipip_mode: always # change to "cross-subnet" if you only want ipip encapsulation on traffic going across subnets
Support --ipip option for calico pool Adds new boolean configuration variable for calico network plugin `ipip`. When it's enabled calico pool is created with '--ipip' option (IP-over-IP encapsulation across hosts). Also refactor pool creation tasks to simplify logic and make tasks more readable.
2016-07-21 19:05:40 +08:00
Allow to use custom "canalized" calico cni - Allow to overwrite calico cni binaries copied from hyperkube by the custom ones. - Fix calico-ipam deployment (it had wrong source in rsync) - Make copy from hyperkube idempotent (use rsync instead of cp) - Remove some orphaned comments
2016-09-22 23:34:11 +08:00
# Set to true if you want your calico cni binaries to overwrite the
# ones from hyperkube while leaving other cni plugins intact.
upgrade to kubernetes version 1.4.0 test to change the machine type Revert "test to change the machine type" This reverts commit 7a91f1b5405a39bee6cb91940b09a0b0f9d3aee1. use google dns server when no upstream dns are defined comment upstream_dns_servers update documentation remove deprecated kubelet flags Revert "remove deprecated kubelet flags" This reverts commit 21e3b893c896d0291c36a07d0414f4cb88b8d8ac.
2016-10-09 01:19:25 +08:00
overwrite_hyperkube_cni: true
Add etcd TLS support
2016-11-09 18:44:41 +08:00
calico_cert_dir: /etc/calico/certs
etcd_cert_dir: /etc/ssl/etcd/ssl
Move CNI config and add MTU support for calico-cni - Move CNI configuration creation for Calico to appropriate network_plugin role from kubernetes/node. - Add support for MTU configuration in Calico.
2016-11-14 15:48:28 +08:00
Add calico/routereflector support Add BGP route reflectors support in order to optimize BGP topology for deployments with Calico network plugin. Also bump version of calico/ctl for some bug fixes.
2016-12-09 00:48:54 +08:00
# Global as_num (/calico/bgp/v1/global/as_num)
global_as_num: "64512"
Move CNI config and add MTU support for calico-cni - Move CNI configuration creation for Calico to appropriate network_plugin role from kubernetes/node. - Add support for MTU configuration in Calico.
2016-11-14 15:48:28 +08:00
# You can set MTU value here. If left undefined or empty, it will
# not be specified in calico CNI config, so Calico will use built-in
# defaults. The value should be a number, not a string.
# calico_mtu: 1500
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 22:44:44 +08:00
# Limits for apps
calico_node_memory_limit: 500M
calico_node_cpu_limit: 300m
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines
2017-02-28 00:53:43 +08:00
calico_node_memory_requests: 64M
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 22:44:44 +08:00
calico_node_cpu_requests: 150m
calicoctl_memory_limit: 170M
calicoctl_cpu_limit: 100m
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines
2017-02-28 00:53:43 +08:00
calicoctl_memory_requests: 32M
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 22:44:44 +08:00
calicoctl_cpu_requests: 50m
Add calico variable that enables ignoring Kernel's RPF Setting (#1493)
2017-08-20 19:01:09 +08:00
Adding calico/node env vars for prometheus configuration
2017-10-04 05:24:05 +08:00
# Enable Prometheus Metrics endpoint for felix
calico_felix_prometheusmetricsenabled: "false"
calico_felix_prometheusmetricsport: 9091
calico_felix_prometheusgometricsenabled: "true"
calico_felix_prometheusprocessmetricsenabled: "true"
Add calico variable that enables ignoring Kernel's RPF Setting (#1493)
2017-08-20 19:01:09 +08:00
# Should calico ignore kernel's RPF check setting,
# see https://github.com/projectcalico/felix/blob/ab8799eaea66627e5db7717e62fca61fd9c08646/python/calico/felix/config.py#L198
calico_node_ignorelooserpf: false
Move calico to daemonset (#1605) * Drop legacy calico logic * add calico as a daemonset
2017-09-04 16:29:51 +08:00
rbac_resources:
- sa
- clusterrole
- clusterrolebinding
IP_AUTODETECTION_METHOD docs
2018-03-24 06:54:17 +08:00
# If you want to use non default IP_AUTODETECTION_METHOD for calico node set this option to one of:
# * can-reach=DESTINATION
# * interface=INTERFACE-REGEX
# see https://docs.projectcalico.org/v3.0/reference/node/configuration#ip-autodetection-methods
#calico_ip_auto_method: "interface=eth.*"