2019-04-19 14:59:54 +08:00
|
|
|
---
|
2019-04-17 23:32:03 +08:00
|
|
|
# Instance settings
|
|
|
|
|
cloud_image: centos-7
|
|
|
|
|
mode: ha
|
|
|
|
|
|
|
|
|
|
# Kubespray settings
|
2019-04-20 21:21:40 +08:00
|
|
|
kubeadm_control_plane: true
|
|
|
|
|
kubeadm_certificate_key: 3998c58db6497dd17d909394e62d515368c06ec617710d02edea31c06d741085
|
2019-04-29 14:36:19 +08:00
|
|
|
kube_proxy_mode: iptables
|
2019-04-17 23:32:03 +08:00
|
|
|
kube_network_plugin: flannel
|
|
|
|
|
helm_enabled: true
|
|
|
|
|
kubernetes_audit: true
|
2019-07-11 14:46:54 +08:00
|
|
|
container_manager: containerd
|
2019-06-06 22:10:17 +08:00
|
|
|
etcd_events_cluster_enabled: true
|
2019-04-17 23:32:03 +08:00
|
|
|
local_volume_provisioner_enabled: true
|
|
|
|
|
etcd_deployment_type: host
|
|
|
|
|
deploy_netchecker: true
|
|
|
|
|
dns_min_replicas: 1
|
|
|
|
|
kube_encrypt_secret_data: true
|
|
|
|
|
ingress_nginx_enabled: true
|
|
|
|
|
cert_manager_enabled: true
|
2019-05-08 04:20:36 +08:00
|
|
|
# Disable as health checks are still unstable and slow to respond.
|
|
|
|
|
metrics_server_enabled: false
|
2019-04-24 05:46:02 +08:00
|
|
|
metrics_server_kubelet_insecure_tls: true
|
2019-04-17 23:32:03 +08:00
|
|
|
kube_token_auth: true
|
|
|
|
|
kube_basic_auth: true
|
2019-04-20 21:21:40 +08:00
|
|
|
enable_nodelocaldns: false
|
2020-09-03 22:25:41 +08:00
|
|
|
kubelet_rotate_server_certificates: true
|
2019-12-05 21:40:32 +08:00
|
|
|
|
|
|
|
|
kube_oidc_url: https://accounts.google.com/.well-known/openid-configuration
|
|
|
|
|
kube_oidc_client_id: kubespray-example
|
2020-06-16 19:10:05 +08:00
|
|
|
|
|
|
|
|
tls_min_version: "VersionTLS12"
|
|
|
|
|
tls_cipher_suites:
|
|
|
|
|
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
|
