update kube-forge concept and add ability to change data dir for containerd
This commit is contained in:
@@ -1,23 +1,36 @@
|
||||
credentials:
|
||||
user: sre-admin
|
||||
ask_sudo_password: false
|
||||
private_key_file: /home/sre-admin/.ssh/id_rsa
|
||||
private_key_file: /Users/georgest/.ssh/id_rsa_bastion_ift
|
||||
|
||||
hosts:
|
||||
- hostname: vbox-prod-k8s-master-01
|
||||
ip: "10.250.50.22"
|
||||
- hostname: t1-disk-lt-k8s-test-master-01
|
||||
ip: "10.100.20.49"
|
||||
roles: [control_plane, etcd]
|
||||
- hostname: vbox-prod-k8s-slave-01
|
||||
ip: "10.250.50.23"
|
||||
|
||||
- hostname: t1-disk-lt-k8s-test-slave-01
|
||||
ip: "10.100.20.48"
|
||||
roles: [node]
|
||||
- hostname: vbox-prod-k8s-slave-02
|
||||
ip: "10.250.50.21"
|
||||
|
||||
- hostname: t1-disk-lt-k8s-test-slave-02
|
||||
ip: "10.100.20.47"
|
||||
roles: [node]
|
||||
|
||||
orchestrator:
|
||||
version: v1.29.0
|
||||
cluster_name: cluster.local
|
||||
kubelet_dir: "/var/lib/kubelet"
|
||||
container_engine:
|
||||
install: true
|
||||
type: "containerd"
|
||||
data_dir: "/var/lib/containerd"
|
||||
state_dir: "/run/containerd"
|
||||
dns:
|
||||
servers:
|
||||
- 8.8.8.8
|
||||
- 8.8.4.4
|
||||
- 1.1.1.1
|
||||
disable_host_nameservers: false
|
||||
ping_access_ip: true
|
||||
auto_renew_certificates: true
|
||||
pod_security_policy_enabled: true
|
||||
@@ -28,103 +41,12 @@ orchestrator:
|
||||
skip_verify: false
|
||||
|
||||
modules:
|
||||
admin_password: changeit
|
||||
observability:
|
||||
enabled: true
|
||||
logging:
|
||||
enabled: true
|
||||
events:
|
||||
enabled: true
|
||||
tracing:
|
||||
enabled: true
|
||||
monitoring:
|
||||
enabled: true
|
||||
alert_manager:
|
||||
enabled: true
|
||||
route:
|
||||
receiver: kvazaric_notifications
|
||||
group_wait: 1s
|
||||
repeat_interval: 180m
|
||||
routes:
|
||||
- receiver: "kvazaric_notifications"
|
||||
group_by: ["alertname"]
|
||||
group_wait: 1s
|
||||
repeat_interval: 8737h
|
||||
matchers:
|
||||
- fireOnce=true
|
||||
receivers:
|
||||
- name: kvazaric_notifications
|
||||
telegram_configs:
|
||||
- send_resolved: true
|
||||
api_url: https://api.telegram.org
|
||||
bot_token: bot_token
|
||||
chat_id: -10000
|
||||
parse_mode: HTML
|
||||
message: '{% raw %}{{ "{{" }} template "default-message" . {{ "}}" }}{% endraw %}'
|
||||
http_config:
|
||||
follow_redirects: true
|
||||
enable_http2: false
|
||||
blackbox:
|
||||
enabled: true
|
||||
kube_state:
|
||||
enabled: true
|
||||
node:
|
||||
enabled: true
|
||||
visualization:
|
||||
enabled: true
|
||||
grafana:
|
||||
enabled: true
|
||||
expose:
|
||||
type: ingress # ingress or NodePort
|
||||
domain: grafana.disk.lt.t1.cloud
|
||||
# path: "/grafana"
|
||||
tls:
|
||||
enabled: true
|
||||
|
||||
cicd:
|
||||
enabled: true
|
||||
argo_cd:
|
||||
expose:
|
||||
type: ingress # ingress or NodePort
|
||||
domain: argocd.disk.lt.t1.cloud
|
||||
# path: "/cicd"
|
||||
tls:
|
||||
enabled: true
|
||||
rollouts:
|
||||
enabled: true
|
||||
updates_operator:
|
||||
enabled: true
|
||||
|
||||
secrets_storage:
|
||||
enabled: true
|
||||
key_shares: 5
|
||||
key_threshold: 3
|
||||
expose:
|
||||
type: ingress # ingress or NodePort
|
||||
domain: vault.disk.lt.t1.cloud
|
||||
tls:
|
||||
enabled: true
|
||||
csi_integration:
|
||||
enabled: true
|
||||
|
||||
registry:
|
||||
enabled: true
|
||||
expose:
|
||||
type: ingress # ingress or nodePort
|
||||
domain: harbor.disk.lt.t1.cloud
|
||||
tls:
|
||||
enabled: true
|
||||
enabled_scanner: true
|
||||
|
||||
additional:
|
||||
cert_manager:
|
||||
enabled: true
|
||||
account_email: adminmail@gmail.com
|
||||
ingress:
|
||||
enabled: true
|
||||
host_network: true
|
||||
account_email: g.stykalin@rockitsoft.ru
|
||||
storage:
|
||||
longhorn:
|
||||
enabled: true
|
||||
enabled: false
|
||||
secrets_store_csi_driver:
|
||||
enabled: true
|
||||
enabled: false
|
||||
|
||||
Reference in New Issue
Block a user