kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
kubespray/roles/network_plugin/calico/defaults/main.yml

75 lines
2.6 KiB
YAML
Raw Normal View History

split network plugins into distinct roles
2016-01-30 23:04:47 +08:00
---
calico: enabling nat outgoing by default
2016-02-21 19:42:23 +08:00
# Enables Internet connectivity from containers
nat_outgoing: true
choose between gce and aws cloud providers
2016-03-24 00:27:06 +08:00
Fix yaml checks
2018-09-06 22:26:57 +08:00
# add default ippool name
calico upgrade to v3 (#3086) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml
2018-08-23 22:17:18 +08:00
calico_pool_name: "default-pool"
calico CALICO_IPV4POOL_IPIP overriding variable (#3507)
2018-10-12 15:09:36 +08:00
calico_ipv4pool_ipip: "Off"
calico upgrade to v3 (#3086) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml
2018-08-23 22:17:18 +08:00
Support --ipip option for calico pool Adds new boolean configuration variable for calico network plugin `ipip`. When it's enabled calico pool is created with '--ipip' option (IP-over-IP encapsulation across hosts). Also refactor pool creation tasks to simplify logic and make tasks more readable.
2016-07-21 19:05:40 +08:00
# Use IP-over-IP encapsulation across hosts
updated to direct control over ipip
2017-06-23 15:16:05 +08:00
ipip: true
Fix ipip: false in calico v3 (#4473)
2019-04-10 20:50:15 +08:00
ipip_mode: "{{ 'Always' if ipip else 'Never' }}" # change to "CrossSubnet" if you only want ipip encapsulation on traffic going across subnets
Support --ipip option for calico pool Adds new boolean configuration variable for calico network plugin `ipip`. When it's enabled calico pool is created with '--ipip' option (IP-over-IP encapsulation across hosts). Also refactor pool creation tasks to simplify logic and make tasks more readable.
2016-07-21 19:05:40 +08:00
Add etcd TLS support
2016-11-09 18:44:41 +08:00
calico_cert_dir: /etc/calico/certs
Move CNI config and add MTU support for calico-cni - Move CNI configuration creation for Calico to appropriate network_plugin role from kubernetes/node. - Add support for MTU configuration in Calico.
2016-11-14 15:48:28 +08:00
Add calico/routereflector support Add BGP route reflectors support in order to optimize BGP topology for deployments with Calico network plugin. Also bump version of calico/ctl for some bug fixes.
2016-12-09 00:48:54 +08:00
# Global as_num (/calico/bgp/v1/global/as_num)
global_as_num: "64512"
Move CNI config and add MTU support for calico-cni - Move CNI configuration creation for Calico to appropriate network_plugin role from kubernetes/node. - Add support for MTU configuration in Calico.
2016-11-14 15:48:28 +08:00
# You can set MTU value here. If left undefined or empty, it will
# not be specified in calico CNI config, so Calico will use built-in
# defaults. The value should be a number, not a string.
# calico_mtu: 1500
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 22:44:44 +08:00
# Limits for apps
calico_node_memory_limit: 500M
calico_node_cpu_limit: 300m
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines
2017-02-28 00:53:43 +08:00
calico_node_memory_requests: 64M
Systemd units, limits, and bin path fixes * Add restart for weave service unit * Reuse docker_bin_dir everythere * Limit systemd managed docker containers by CPU/RAM. Do not configure native systemd limits due to the lack of consensus in the kernel community requires out-of-tree kernel patches. Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
2016-12-23 22:44:44 +08:00
calico_node_cpu_requests: 150m
calicoctl_memory_limit: 170M
calicoctl_cpu_limit: 100m
Lower default memory requests This is to address out of memory issues on CI as well as help fit deployments for people starting out with kargo on smaller machines
2017-02-28 00:53:43 +08:00
calicoctl_memory_requests: 32M
[PR-Calico]Support calico 3.4.0 (#4102) * Suport calico 3.4.0 Signed-off-by: wangxf1987 <xiaofeix.wang@gmail.com> * Remove symlink + cni conflist template when 3.3.0+, handle Canal, addition of install-cni: sidecar(3.3.0) or initontainer(3.4.0), KUBECONFIG_FILEPATH, calico_cert_dir, advertise cluster ips * scheduler.alpha.kubernetes.io/critical-pod deprecated since 1.12
2019-01-29 03:03:49 +08:00
calicoctl_cpu_requests: 250m
Add calico variable that enables ignoring Kernel's RPF Setting (#1493)
2017-08-20 19:01:09 +08:00
Adding calico/node env vars for prometheus configuration
2017-10-04 05:24:05 +08:00
# Enable Prometheus Metrics endpoint for felix
Calico felix - Fix jinja2 boolean condition (#4348) * Fix jinja2 boolean condition * Convert all felix variable to booleans instead.
2019-03-30 07:07:09 +08:00
calico_felix_prometheusmetricsenabled: false
Adding calico/node env vars for prometheus configuration
2017-10-04 05:24:05 +08:00
calico_felix_prometheusmetricsport: 9091
Calico felix - Fix jinja2 boolean condition (#4348) * Fix jinja2 boolean condition * Convert all felix variable to booleans instead.
2019-03-30 07:07:09 +08:00
calico_felix_prometheusgometricsenabled: true
calico_felix_prometheusprocessmetricsenabled: true
Adding calico/node env vars for prometheus configuration
2017-10-04 05:24:05 +08:00
calico upgrade to v3 (#3086) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml
2018-08-23 22:17:18 +08:00
### check latest version https://github.com/projectcalico/calico-upgrade/releases
Fix backward compatibility with calico 2.6
2018-09-06 20:49:06 +08:00
calico_upgrade_enabled: true
calico upgrade to v3 (#3086) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml
2018-08-23 22:17:18 +08:00
calico_upgrade_version: v1.0.5
Introduce `calico_upgrade_url` var for Calico upgrade tool. So that binary can be sourced from anywhere - not only github.
2019-01-23 16:15:10 +08:00
calico_upgrade_url: "https://github.com/projectcalico/calico-upgrade/releases/download/{{ calico_upgrade_version }}/calico-upgrade"
calico upgrade to v3 (#3086) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml
2018-08-23 22:17:18 +08:00
Make Calico Felix log level configurable (#3781)
2018-11-28 16:55:01 +08:00
# Set the agent log level. Can be debug, warning, info or fatal
calico_loglevel: info
Add calico variable that enables ignoring Kernel's RPF Setting (#1493)
2017-08-20 19:01:09 +08:00
# Should calico ignore kernel's RPF check setting,
# see https://github.com/projectcalico/felix/blob/ab8799eaea66627e5db7717e62fca61fd9c08646/python/calico/felix/config.py#L198
calico_node_ignorelooserpf: false
Move calico to daemonset (#1605) * Drop legacy calico logic * add calico as a daemonset
2017-09-04 16:29:51 +08:00
Make Felix healthhost configurable
2018-09-18 20:48:29 +08:00
# Define address on which Felix will respond to health requests
calico_healthhost: "localhost"
IP_AUTODETECTION_METHOD docs
2018-03-24 06:54:17 +08:00
# If you want to use non default IP_AUTODETECTION_METHOD for calico node set this option to one of:
# * can-reach=DESTINATION
# * interface=INTERFACE-REGEX
# see https://docs.projectcalico.org/v3.0/reference/node/configuration#ip-autodetection-methods
Integrate jetstack/cert-manager 0.2.3 to Kubespray
2018-03-28 22:30:00 +08:00
# calico_ip_auto_method: "interface=eth.*"
Make Calico nodename overridable on bare metal Signed-off-by: Daniel Mohr <daniel.mohr@supercrunch.io>
2018-05-14 20:13:51 +08:00
Fix calico when kube_override_hostname is set (#4235) This fixes an issue where the `nodename` in calico's cni config json can fall out of sync with the k8s node name used by the calico pod if `kube_override_hostname` is set
2019-02-14 08:02:48 +08:00
calico_baremetal_nodename: "{{ kube_override_hostname | default(inventory_hostname) }}"
calico upgrade to v3 (#3086) * calico upgrade to v3 * update calico_rr version * add missing file * change contents of main.yml as it was left old version * enable network policy by default * remove unneeded task * Fix kubelet calico settings * fix when statement * switch back to node-kubeconfig.yaml
2018-08-23 22:17:18 +08:00
### do not enable this, this is detected in scope of tasks, this is just a default value
Fix backward compatibility with calico 2.6
2018-09-06 20:49:06 +08:00
calico_upgrade_needed: false
Use K8s 1.14 and add kubeadm experimental control plane mode (#4514) * Use K8s 1.14 and add kubeadm experimental control plane mode This reverts commit d39c273d96afe610fed03a2558ffc1beec64c114. * Cleanup kubeadm setup run on first master * pin kubeadm_certificate_key in test * Remove kubelet autolabel of kube-node, add symlink for pki dir Change-Id: Id5e74dd667c60675dbfe4193b0bc9fb44380e1ca
2019-04-19 21:01:54 +08:00
kube_etcd_cacert_file: ca.pem
kube_etcd_cert_file: node-{{ inventory_hostname }}.pem
kube_etcd_key_file: node-{{ inventory_hostname }}-key.pem
Add support calico kubernetes datastore and typha. (#4498) * Add support calico kubernetes datastore and typha. * Add typha_enabled to kubespray-defaults.
2019-04-25 20:00:48 +08:00
# Choose data store type for calico: "etcd" or "kdd" (kubernetes datastore)
calico_datastore: "etcd"
# Use typha (only with kdd)
typha_enabled: false
# Number of typha replicas
typha_replicas: 1