update kube-forge concept and add ability to change data dir for containerd

kubespray/inventory/group_vars/all.yml

@@ -32,6 +32,7 @@ disable_host_nameservers: false
 upstream_dns_servers:
   - 8.8.8.8
   - 8.8.4.4
+  - 1.1.1.1
 
 ## There are some changes specific to the cloud providers
 ## for instance we need to encapsulate packets with some network plugins
@@ -128,7 +129,5 @@ unsafe_show_logs: false
 ## If enabled it will allow kubespray to attempt setup even if the distribution is not supported. For unsupported distributions this can lead to unexpected failures in some cases.
 allow_unsupported_distribution_setup: false
 
-## Containerd settings
-# containerd_metadata_root_dir: /app/lib/containerd
-# The state directory for containerd
-# containerd_state_dir: /app/run/containerd
+## Kubelet additional settings
+kubelet_custom_flags: "--root-dir=/var/lib/kubelet"

kubespray/inventory/group_vars/all/containerd.yml

@@ -0,0 +1,60 @@
+---
+# Please see roles/container-engine/containerd/defaults/main.yml for more configuration options
+
+containerd_storage_dir: /var/lib/containerd
+containerd_state_dir:  /run/containerd
+
+# containerd_oom_score: 0
+
+# containerd_default_runtime: "runc"
+# containerd_snapshotter: "native"
+
+# containerd_runc_runtime:
+#   name: runc
+#   type: "io.containerd.runc.v2"
+#   engine: ""
+#   root: ""
+
+# containerd_additional_runtimes:
+# Example for Kata Containers as additional runtime:
+#   - name: kata
+#     type: "io.containerd.kata.v2"
+#     engine: ""
+#     root: ""
+
+# containerd_grpc_max_recv_message_size: 16777216
+# containerd_grpc_max_send_message_size: 16777216
+
+# Containerd debug socket location: unix or tcp format
+# containerd_debug_address: ""
+
+# Containerd log level
+# containerd_debug_level: "info"
+
+# Containerd logs format, supported values: text, json
+# containerd_debug_format: ""
+
+# Containerd debug socket UID
+# containerd_debug_uid: 0
+
+# Containerd debug socket GID
+# containerd_debug_gid: 0
+
+# containerd_metrics_address: ""
+
+# containerd_metrics_grpc_histogram: false
+
+# Registries defined within containerd.
+# containerd_registries_mirrors:
+#  - prefix: docker.io
+#    mirrors:
+#     - host: https://registry-1.docker.io
+#       capabilities: ["pull", "resolve"]
+#       skip_verify: false
+
+# containerd_max_container_log_line_size: -1
+
+# containerd_registry_auth:
+#   - registry: 10.0.0.2:5000
+#     username: user
+#     password: pass

kubespray/inventory/group_vars/k8s_cluster/k8s-cluster.yml

@@ -157,7 +157,7 @@ kube_encrypt_secret_data: false
 
 # DNS configuration.
 # Kubernetes cluster name, also will be used as DNS domain
-cluster_name: k8s-cluster.local
+cluster_name: cluster.local
 # Subdomains of DNS domain to be resolved via /etc/resolv.conf for hostnet pods
 ndots: 2
 # dns_timeout: 2

kubespray/inventory/hosts

@@ -1,17 +1,17 @@
 
-vbox-prod-k8s-master-01 ansible_host=10.250.50.22 ip=10.250.50.22  
-vbox-prod-k8s-slave-01 ansible_host=10.250.50.23 ip=10.250.50.23  
-vbox-prod-k8s-slave-02 ansible_host=10.250.50.21 ip=10.250.50.21  
+t1-disk-lt-k8s-test-master-01 ansible_host=10.100.20.49 ip=10.100.20.49  
+t1-disk-lt-k8s-test-slave-01 ansible_host=10.100.20.48 ip=10.100.20.48  
+t1-disk-lt-k8s-test-slave-02 ansible_host=10.100.20.47 ip=10.100.20.47  
 
 [kube_control_plane]
-vbox-prod-k8s-master-01
+t1-disk-lt-k8s-test-master-01
 
 [etcd]
-vbox-prod-k8s-master-01
+t1-disk-lt-k8s-test-master-01
 
 [kube_node]
-vbox-prod-k8s-slave-01
-vbox-prod-k8s-slave-02
+t1-disk-lt-k8s-test-slave-01
+t1-disk-lt-k8s-test-slave-02
 
 [k8s_cluster:children]
 kube_control_plane
@@ -20,4 +20,4 @@ kube_node
 [all:vars]
 ansible_connection=ssh
 ansible_user=sre-admin
-ansible_ssh_private_key_file=/root/.ssh/id_rsa
+ansible_ssh_private_key_file=/Users/georgest/.ssh/id_rsa_bastion_ift