kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/inventory/sample/group_vars/k8s-cluster/addons.yml

154 lines
4.8 KiB
YAML
Raw Normal View History

Yamllint fixes (#4410) * Lint everything in the repository with yamllint * yamllint fixes: syntax fixes only * yamllint fixes: move comments to play names * yamllint fixes: indent comments in .gitlab-ci.yml file
2019-04-01 17:38:33 +08:00
---
Split group-variables
2018-08-31 22:05:45 +08:00
# Kubernetes dashboard
# RBAC required. see docs/getting-started.md for access details.
Update dashboard_enabled on sample (#7316) Since https://github.com/kubernetes-sigs/kubespray/pull/6804 dashboard_enabled has been false by default. However we forgot to update it on sample inventory and it made confusion. This updates the sample inventory.
2021-03-02 16:59:19 +08:00
# dashboard_enabled: false
Split group-variables
2018-08-31 22:05:45 +08:00
# Helm deployment
helm_enabled: false
# Registry deployment
registry_enabled: false
Replaces nonexisting system_namespace variable (#3389)
2018-09-25 16:39:02 +08:00
# registry_namespace: kube-system
Split group-variables
2018-08-31 22:05:45 +08:00
# registry_storage_class: ""
# registry_disk_size: "10Gi"
Support Metrics Server as addon (#3560). (#3563) * Support Metrics Server as addon (#3560). * Update metrics server v0.3.1. * Add metrics server test. * Replace metrics server manifests with kubernetes/cluster/addons's. * Modify metrics server manifests for kubespray. * Follow PR#3558 node label node-role.kubernetes.io/master change * Fix metrics server parameters base_metrics_server_... to metrics_server_... * Fix too hard corded metrics_server_memory_per_node * Add configurable insecure tls for metrics-apiservice * Downloadable addon-resizer and extract parameter as variables * Remove metrics server version from deployment name * Metrics Server work when all masters has node role * Download metrics-server and add-resizer container only on master * ServiceAccount and ConfigMap is separated and fix application name * Remove old metrics server clusterrole template * Fix addon-resizer image specify * Make InternalIP default for metrics_server_kubelet_preferred_address_types Make InternalIP default because multiple preferrred address types does not work.
2018-11-23 16:36:21 +08:00
# Metrics Server deployment
metrics_server_enabled: false
# metrics_server_kubelet_insecure_tls: true
# metrics_server_metric_resolution: 60s
# metrics_server_kubelet_preferred_address_types: "InternalIP"
feat(external-provisioner): adds support for local-path-provisioner (#4232) * feat(external-provisioner/local-path-provisioner): adds support for local path provisioner Helpful for local development but also in production workloads (once the permission model is worked out) where you have redundancy built into the software uses the PVCs (e.g. database cluster with synchronous replication) * feat(local-path-provisioner): adds debug flag, image tag group var * fix(local-path-provisioner): moves image repo/tag to download role * test(gce_centos7-flannel): enables local-path-provisioner in test case * fix(addons): add image repo/tag to commented default values * fix(local-path-provisioner): typo in jinja template for local path provisioner * style(local-path-provisioner): debug flag condition re-formatted * fix(local-path-provisioner): adds missing default value for debug flag * fix(local-path-provisioner): syntax fix for debug if condition end * fix(local-path-provisioner): jinja template syntax: if condition white space
2019-02-26 14:45:30 +08:00
# Rancher Local Path Provisioner
local_path_provisioner_enabled: false
# local_path_provisioner_namespace: "local-path-storage"
# local_path_provisioner_storage_class: "local-path"
# local_path_provisioner_reclaim_policy: Delete
# local_path_provisioner_claim_root: /opt/local-path-provisioner/
# local_path_provisioner_debug: false
# local_path_provisioner_image_repo: "rancher/local-path-provisioner"
local-path-provisioner change default version to v0.0.19 and update config template (#7238) * update local-path-storage config template to version v0.0.19 * changes local_path_provisioner image tag to v0.0.19 * removes copy paste example from rancher local-path-provisioner repo
2021-02-03 22:50:28 +08:00
# local_path_provisioner_image_tag: "v0.0.19"
add local-path-provosioner helper image def (#5817)
2020-04-08 14:51:43 +08:00
# local_path_provisioner_helper_image_repo: "busybox"
# local_path_provisioner_helper_image_tag: "latest"
feat(external-provisioner): adds support for local-path-provisioner (#4232) * feat(external-provisioner/local-path-provisioner): adds support for local path provisioner Helpful for local development but also in production workloads (once the permission model is worked out) where you have redundancy built into the software uses the PVCs (e.g. database cluster with synchronous replication) * feat(local-path-provisioner): adds debug flag, image tag group var * fix(local-path-provisioner): moves image repo/tag to download role * test(gce_centos7-flannel): enables local-path-provisioner in test case * fix(addons): add image repo/tag to commented default values * fix(local-path-provisioner): typo in jinja template for local path provisioner * style(local-path-provisioner): debug flag condition re-formatted * fix(local-path-provisioner): adds missing default value for debug flag * fix(local-path-provisioner): syntax fix for debug if condition end * fix(local-path-provisioner): jinja template syntax: if condition white space
2019-02-26 14:45:30 +08:00
Split group-variables
2018-08-31 22:05:45 +08:00
# Local volume provisioner deployment
local_volume_provisioner_enabled: false
Replaces nonexisting system_namespace variable (#3389)
2018-09-25 16:39:02 +08:00
# local_volume_provisioner_namespace: kube-system
Allow configuration of nodelabels in local_volume_provisioner (#6620)
2020-09-17 17:44:58 +08:00
# local_volume_provisioner_nodelabels:
# - kubernetes.io/hostname
# - topology.kubernetes.io/region
# - topology.kubernetes.io/zone
Support multiple local volume provisioner StorageClasses (#3450) - Local Volume StorageClass configuration is now manged by `local_volume_provisioner_storage_classes`, a list of maps that specifies local storage classes with `name` `host_dir` and `mount_dir` keys per entry - Tasks and templates updated to loop through local volume storage classes - Previous defaults for path/class names were not changed - Fixed an issue where a `kubernetes/preinstall` was creating directories inconsistently with the `kubernetes-apps/external_provisioner/local_volume_provisioner` task
2018-10-05 20:52:25 +08:00
# local_volume_provisioner_storage_classes:
Bugfixes for Local Volume Provisioner - Fixed an issue where storage class host directories were looped through excessive target hosts - Fixes examples in the LVP `README.md` to use nested dicts instead of a list of dicts
2019-01-09 07:32:39 +08:00
# local-storage:
# host_dir: /mnt/disks
# mount_dir: /mnt/disks
Upgrade local volume provisioner to v2.3.2 (#4983)
2019-07-16 20:27:26 +08:00
# volume_mode: Filesystem
# fs_type: ext4
Bugfixes for Local Volume Provisioner - Fixed an issue where storage class host directories were looped through excessive target hosts - Fixes examples in the LVP `README.md` to use nested dicts instead of a list of dicts
2019-01-09 07:32:39 +08:00
# fast-disks:
# host_dir: /mnt/fast-disks
# mount_dir: /mnt/fast-disks
# block_cleaner_command:
# - "/scripts/shred.sh"
# - "2"
# volume_mode: Filesystem
# fs_type: ext4
Split group-variables
2018-08-31 22:05:45 +08:00
# CephFS provisioner deployment
cephfs_provisioner_enabled: false
# cephfs_provisioner_namespace: "cephfs-provisioner"
# cephfs_provisioner_cluster: ceph
# cephfs_provisioner_monitors: "172.24.0.1:6789,172.24.0.2:6789,172.24.0.3:6789"
# cephfs_provisioner_admin_id: admin
# cephfs_provisioner_secret: secret
# cephfs_provisioner_storage_class: cephfs
# cephfs_provisioner_reclaim_policy: Delete
# cephfs_provisioner_claim_root: /volumes
# cephfs_provisioner_deterministic_names: true
add RBD Provisioner Addon (#3667) (#3668) Based on the CephFS Provisioner Addon, the following changes have been made: - Upstream v2.1.1-k8s1.11 - Configurable Provisioner replicas
2019-04-17 14:14:02 +08:00
# RBD provisioner deployment
rbd_provisioner_enabled: false
# rbd_provisioner_namespace: rbd-provisioner
# rbd_provisioner_replicas: 2
# rbd_provisioner_monitors: "172.24.0.1:6789,172.24.0.2:6789,172.24.0.3:6789"
# rbd_provisioner_pool: kube
# rbd_provisioner_admin_id: admin
# rbd_provisioner_secret_name: ceph-secret-admin
# rbd_provisioner_secret: ceph-key-admin
# rbd_provisioner_user_id: kube
# rbd_provisioner_user_secret_name: ceph-secret-user
# rbd_provisioner_user_secret: ceph-key-user
# rbd_provisioner_user_secret_namespace: rbd-provisioner
# rbd_provisioner_fs_type: ext4
# rbd_provisioner_image_format: "2"
# rbd_provisioner_image_features: layering
# rbd_provisioner_storage_class: rbd
# rbd_provisioner_reclaim_policy: Delete
Split group-variables
2018-08-31 22:05:45 +08:00
# Nginx ingress controller deployment
ingress_nginx_enabled: false
# ingress_nginx_host_network: false
Add ability to setup virtual ip for ingress-controller (#5044)
2019-08-07 10:24:50 +08:00
ingress_publish_status_address: ""
Split group-variables
2018-08-31 22:05:45 +08:00
# ingress_nginx_nodeselector:
Cleanup deprecated labels beta.kubernetes.io/arch and beta.kubernetes.io/os (#5964)
2020-04-17 20:51:06 +08:00
# kubernetes.io/os: "linux"
Add support to set tolerations for ingress-nginx (#3742) Introduced variable `ingress_nginx_tolerations` to set custom tolerations for Ingress nginx daemonset, to be able to schedule ingress-nginx on dedicated nodes with taints.
2018-11-27 19:30:16 +08:00
# ingress_nginx_tolerations:
Revert "Fix for unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels (#4320)" (#4553) This reverts commit 586ad89d50d3900b8e2de98086bf5d982c20e5f6.
2019-04-17 22:58:06 +08:00
# - key: "node-role.kubernetes.io/master"
Add support to set tolerations for ingress-nginx (#3742) Introduced variable `ingress_nginx_tolerations` to set custom tolerations for Ingress nginx daemonset, to be able to schedule ingress-nginx on dedicated nodes with taints.
2018-11-27 19:30:16 +08:00
# operator: "Equal"
Fix kubeadm v1beta1 configuration taint (#3928) * Use master node taint same as kubeadm configuration v1alpha3 or before.
2019-01-03 19:42:23 +08:00
# value: ""
Add support to set tolerations for ingress-nginx (#3742) Introduced variable `ingress_nginx_tolerations` to set custom tolerations for Ingress nginx daemonset, to be able to schedule ingress-nginx on dedicated nodes with taints.
2018-11-27 19:30:16 +08:00
# effect: "NoSchedule"
Change node-role.kubernetes.io from master to control-plane (#7183)
2021-01-22 00:13:03 +08:00
# - key: "node-role.kubernetes.io/control-plane"
# operator: "Equal"
# value: ""
# effect: "NoSchedule"
Split group-variables
2018-08-31 22:05:45 +08:00
# ingress_nginx_namespace: "ingress-nginx"
# ingress_nginx_insecure_port: 80
# ingress_nginx_secure_port: 443
# ingress_nginx_configmap:
# map-hash-bucket-size: "128"
change nginx default HTTPS protocol from "SSLv2" to "TLSv1.2 TLSv1.3" (#7144)
2021-01-14 00:34:36 +08:00
# ssl-protocols: "TLSv1.2 TLSv1.3"
Split group-variables
2018-08-31 22:05:45 +08:00
# ingress_nginx_configmap_tcp_services:
# 9000: "default/example-go:8080"
# ingress_nginx_configmap_udp_services:
Minor cleanups of CoreDNS issues and CI job (#4719) * Minor cleanups * Add comment in docs that nodelocaldns cache is enabled by default
2019-05-08 04:20:36 +08:00
# 53: "kube-system/coredns:53"
Pass `ingress_nginx_extra_args` when deploying the nginx-ingress addon (#5321)
2019-11-11 19:51:41 +08:00
# ingress_nginx_extra_args:
# - --default-ssl-certificate=default/foo-tls
Split group-variables
2018-08-31 22:05:45 +08:00
Support for Ambassador OSS as an Ingress (#6135) Support for Ambassador OSS as an Ingress Controller when settings `ingress_ambassador_enabled: true`. Signed-off-by: Alvaro Saurin <alvaro.saurin@gmail.com>
2020-06-24 22:39:17 +08:00
# ambassador ingress controller deployment
ingress_ambassador_enabled: false
# ingress_ambassador_namespace: "ambassador"
# ingress_ambassador_version: "*"
Add AWS ALB Ingress Controller (#5489) * Add AWS ALB Ingress Controller Ansible role * remove trailing spaces * update owners * ALB ingress: update rbac clusterrole and remove role * Move alb-ingress role to roles/kubernetes-apps/ingress_controller folder
2020-03-16 17:58:35 +08:00
# ALB ingress controller deployment
ingress_alb_enabled: false
# alb_ingress_aws_region: "us-east-1"
# alb_ingress_restrict_scheme: "false"
# Enables logging on all outbound requests sent to the AWS API.
# If logging is desired, set to true.
# alb_ingress_aws_debug: "false"
Split group-variables
2018-08-31 22:05:45 +08:00
# Cert manager deployment
cert_manager_enabled: false
# cert_manager_namespace: "cert-manager"
Change MetalLB to one of addons (#6238) This changes MetalLB contrib to one of addons for deploying MetalLB with Kubernetes cluster deployment. By the default, Kubespray doesn't deploy MetalLB addon.
2020-06-30 06:11:59 +08:00
# MetalLB deployment
metallb_enabled: false
# metallb_ip_range:
# - "10.5.0.50-10.5.0.99"
MetalLB: bump to v0.9.5 (#7241) Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>
2021-02-03 17:02:28 +08:00
# metallb_version: v0.9.5
Change MetalLB to one of addons (#6238) This changes MetalLB contrib to one of addons for deploying MetalLB with Kubernetes cluster deployment. By the default, Kubespray doesn't deploy MetalLB addon.
2020-06-30 06:11:59 +08:00
# metallb_protocol: "layer2"
# metallb_port: "7472"
# metallb_limits_cpu: "100m"
# metallb_limits_mem: "100Mi"
# metallb_additional_address_pools:
# kube_service_pool:
# ip_range:
# - "10.5.1.50-10.5.1.99"
# protocol: "layer2"
# auto_assign: false
Option for MetalLB to talk BGP (#6383) * Option for MetalLB to talk BGP * Check for BGP peers when metallb_protocol is bgp * README clarification * Commented values as documentation only in the sample inventory * layer 2 or BGP, not both
2020-08-05 16:52:40 +08:00
# metallb_protocol: "bgp"
# metallb_peers:
# - peer_address: 192.0.2.1
# peer_asn: 64512
# my_asn: 4200000000
# - peer_address: 192.0.2.2
# peer_asn: 64513
# my_asn: 4200000000