diff --git a/config.yaml b/config.yaml deleted file mode 100644 index 22c9a82..0000000 --- a/config.yaml +++ /dev/null @@ -1,292 +0,0 @@ -credentials: - user: sre-admin - ask_sudo_password: false - private_key_file: /home/sre-admin/.ssh/id_rsa - -hosts: - - hostname: vbox-prod-k8s-master-01 - ip: "10.250.50.22" - roles: [control_plane, etcd] - - # # Optional creds for each host - # user: user - # password: nF5S8nuKi87Dh42Jnjik - - - hostname: vbox-prod-k8s-slave-01 - ip: "10.250.50.23" - roles: [node] - - - hostname: vbox-prod-k8s-slave-02 - ip: "10.250.50.21" - roles: [node] - -orchestrator: - version: v1.29.0 - cluster_name: k8s-cluster.local - # bin_dir: /usr/local/bin - # sysctl_file_path: /etc/sysctl.d/99-sysctl.conf - loadbalancer_apiserver_port: 6443 - dns: - servers: - - 8.8.8.8 - - 8.8.4.4 - disable_host_nameservers: false - # cloud_provider: "" # 'gce', 'aws', 'azure', 'openstack', 'vsphere', 'oci', or 'external' - # external_cloud_provider: "" # 'openstack', 'vsphere' and 'hcloud' - - container_engine: - type: containerd # docker, crio and containerd - install: true - - ping_access_ip: true - auto_renew_certificates: true - event_ttl: "1h0m0s" - pod_security_policy_enabled: true - - network: - plugin: calico # cilium, calico, kube-ovn, weave or flannel - # service_addresses: 10.233.0.0/18 - # pods_subnet: 10.233.64.0/18 - -modules: - admin_password: changeit - - ## Add additional helm repositories before installation - # additional_repositories: - # - name: argo-helm - # url: "https://argoproj.github.io/argo-helm" - - observability: - enabled: true - - logging: - enabled: true - - loki: - persistence: - storage_size: 10Gi - retention: 168h - - events: - enabled: true - cron: - schedule: "*/2 * * * *" - - tracing: - enabled: true - - tempo: - retention: 24h - listen_port: 3100 - - persistence: - storage_size: 10Gi - - tempo_query: - listen_port: 16686 - - monitoring: - enabled: true - - prometheus: - scrape_interval: 15s - persistence: - storage_size: 3Gi - retention: 7d - - alert_manager: - enabled: true - # additionalMessageTemplates: {} - - route: - receiver: kvazaric_notifications - group_wait: 1s - repeat_interval: 180m - - routes: - - receiver: "kvazaric_notifications" - group_by: ["alertname"] - group_wait: 1s - repeat_interval: 8737h - matchers: - - fireOnce=true - receivers: - - name: kvazaric_notifications - telegram_configs: - - send_resolved: true - api_url: https://api.telegram.org - bot_token: 6364937365:AAHcJKc-McN11gBWuQqoM87zr18eK0VKX9I - chat_id: -968770779 - parse_mode: HTML - message: '{% raw %}{{ "{{" }} template "default-message" . {{ "}}" }}{% endraw %}' - http_config: - follow_redirects: true - enable_http2: false - - blackbox: - enabled: true - additional_modules: | - - kube_state: - enabled: true - - node: - enabled: true - - visualization: - enabled: true - - grafana: - enabled: true - expose: - type: ingress # ingress or NodePort - domain: grafana.disk.lt.t1.cloud - node_port_http: 30007 - - tls: - enabled: true - - persistence: - storage_size: 2Gi - - cicd: - enabled: true - - argo_cd: - expose: - type: ingress # ingress or NodePort - domain: argocd.disk.lt.t1.cloud - - node_port_http: 30005 - node_port_https: 30006 - - tls: - enabled: true - - repositories: - {} - # harbor-helm: - # enableOCI: "true" - # type: helm - # name: helm-mountbit - # url: harbor.disk.t1.cloud/mountbit-helm - # username: username - # password: password - rbac: - additional_policies: | - p, developer, applications, *, */*, allow - - p, developer, applications, *, */*logging*, deny - p, developer, repositories, get, *, allow - p, developer, projects, get, *, allow - - p, developer, logs, get, *, allow - - p, guest, applications, get, */*, allow - p, guest, projects, get, *, allow - - ha: - enabled: false - autoscaling: false - - rollouts: - enabled: true - - updates_operator: - enabled: true - - secrets_storage: - enabled: true - key_shares: 5 - key_threshold: 3 - - # specify unseal keys to auto-unseal after updates or restarts - unseal_keys: - - "8gSX9uR1P0ypMlHN2YSwbARACE/VzBU3nF7Pg3M6mWzj" - - "XV2MmiPbbiWpp0uzfDUTlPqtDfF8Z/HlrZKbHDZXZiGO" - - "b3EPh7JxDLeAgXj6oMxdZronEiJ3ef9KJDazsaibD3TB" - expose: - type: ingress # ingress or NodePort - domain: vault.disk.lt.t1.cloud - node_port: 30004 - - tls: - enabled: true - - # requires secrets_store_csi_driver in additional modules - csi_integration: - enabled: true - agent: - image: hashicorp/vault - tag: 1.16.0 - server: - image: "hashicorp/vault" - tag: 1.16.0 - persistence: - size: 10Gi - - registry: - enabled: true - expose: - type: ingress # ingress or nodePort - # if expose_type is "ingress" - domain: harbor.disk.lt.t1.cloud - - # if expose_type is "NodePort" - node_port_http: 30002 - node_port_https: 30003 - tls: - enabled: true - - persistence: - registry_size: 10Gi - jobservice_size: 1Gi - database_size: 2Gi - redis_size: 1Gi - trivy_size: 5Gi - - defaultProjects: - - name: harbor-helm - public: false - enabled_scanner: true - - additional: - cert_manager: - enabled: true - ha_enabled: false - dns_servers: - - "1.1.1.1" - - "8.8.8.8" - account_email: reversstorm@gmail.com - - ingress: - type: nginx # nginx - enabled: true - ingress_class_name: nginx - host_network: true - - # load_balancer: - # type: metallb - # install: true - - # docker_secrets: - # repositories: - # - name: registry - # repository: registry.example.com - # username: admin - # password: admin - # namespaces: - # - default - - storage: - local_path_provisioner: - storage_class_name: local-path - reclaim_policy: Delete - - longhorn: - enabled: true - - secrets_store_csi_driver: - enabled: true - - ## TODO: ceph