update kube-forge concept and add ability to change data dir for containerd

This commit is contained in:
2024-11-24 17:59:37 +03:00
parent 78cf06e314
commit 1c366bdb6b
46 changed files with 2023 additions and 4343 deletions

View File

@@ -1,23 +1,36 @@
credentials:
user: sre-admin
ask_sudo_password: false
private_key_file: /home/sre-admin/.ssh/id_rsa
private_key_file: /Users/georgest/.ssh/id_rsa_bastion_ift
hosts:
- hostname: vbox-prod-k8s-master-01
ip: "10.250.50.22"
- hostname: t1-disk-lt-k8s-test-master-01
ip: "10.100.20.49"
roles: [control_plane, etcd]
- hostname: vbox-prod-k8s-slave-01
ip: "10.250.50.23"
- hostname: t1-disk-lt-k8s-test-slave-01
ip: "10.100.20.48"
roles: [node]
- hostname: vbox-prod-k8s-slave-02
ip: "10.250.50.21"
- hostname: t1-disk-lt-k8s-test-slave-02
ip: "10.100.20.47"
roles: [node]
orchestrator:
version: v1.29.0
cluster_name: cluster.local
kubelet_dir: "/var/lib/kubelet"
container_engine:
install: true
type: "containerd"
data_dir: "/var/lib/containerd"
state_dir: "/run/containerd"
dns:
servers:
- 8.8.8.8
- 8.8.4.4
- 1.1.1.1
disable_host_nameservers: false
ping_access_ip: true
auto_renew_certificates: true
pod_security_policy_enabled: true
@@ -28,103 +41,12 @@ orchestrator:
skip_verify: false
modules:
admin_password: changeit
observability:
enabled: true
logging:
enabled: true
events:
enabled: true
tracing:
enabled: true
monitoring:
enabled: true
alert_manager:
enabled: true
route:
receiver: kvazaric_notifications
group_wait: 1s
repeat_interval: 180m
routes:
- receiver: "kvazaric_notifications"
group_by: ["alertname"]
group_wait: 1s
repeat_interval: 8737h
matchers:
- fireOnce=true
receivers:
- name: kvazaric_notifications
telegram_configs:
- send_resolved: true
api_url: https://api.telegram.org
bot_token: bot_token
chat_id: -10000
parse_mode: HTML
message: '{% raw %}{{ "{{" }} template "default-message" . {{ "}}" }}{% endraw %}'
http_config:
follow_redirects: true
enable_http2: false
blackbox:
enabled: true
kube_state:
enabled: true
node:
enabled: true
visualization:
enabled: true
grafana:
enabled: true
expose:
type: ingress # ingress or NodePort
domain: grafana.disk.lt.t1.cloud
# path: "/grafana"
tls:
enabled: true
cicd:
enabled: true
argo_cd:
expose:
type: ingress # ingress or NodePort
domain: argocd.disk.lt.t1.cloud
# path: "/cicd"
tls:
enabled: true
rollouts:
enabled: true
updates_operator:
enabled: true
secrets_storage:
enabled: true
key_shares: 5
key_threshold: 3
expose:
type: ingress # ingress or NodePort
domain: vault.disk.lt.t1.cloud
tls:
enabled: true
csi_integration:
enabled: true
registry:
enabled: true
expose:
type: ingress # ingress or nodePort
domain: harbor.disk.lt.t1.cloud
tls:
enabled: true
enabled_scanner: true
additional:
cert_manager:
enabled: true
account_email: adminmail@gmail.com
ingress:
enabled: true
host_network: true
account_email: g.stykalin@rockitsoft.ru
storage:
longhorn:
enabled: true
enabled: false
secrets_store_csi_driver:
enabled: true
enabled: false