Delete config.yaml
This commit is contained in:
292
config.yaml
292
config.yaml
@@ -1,292 +0,0 @@
|
||||
credentials:
|
||||
user: sre-admin
|
||||
ask_sudo_password: false
|
||||
private_key_file: /home/sre-admin/.ssh/id_rsa
|
||||
|
||||
hosts:
|
||||
- hostname: vbox-prod-k8s-master-01
|
||||
ip: "10.250.50.22"
|
||||
roles: [control_plane, etcd]
|
||||
|
||||
# # Optional creds for each host
|
||||
# user: user
|
||||
# password: nF5S8nuKi87Dh42Jnjik
|
||||
|
||||
- hostname: vbox-prod-k8s-slave-01
|
||||
ip: "10.250.50.23"
|
||||
roles: [node]
|
||||
|
||||
- hostname: vbox-prod-k8s-slave-02
|
||||
ip: "10.250.50.21"
|
||||
roles: [node]
|
||||
|
||||
orchestrator:
|
||||
version: v1.29.0
|
||||
cluster_name: k8s-cluster.local
|
||||
# bin_dir: /usr/local/bin
|
||||
# sysctl_file_path: /etc/sysctl.d/99-sysctl.conf
|
||||
loadbalancer_apiserver_port: 6443
|
||||
dns:
|
||||
servers:
|
||||
- 8.8.8.8
|
||||
- 8.8.4.4
|
||||
disable_host_nameservers: false
|
||||
# cloud_provider: "" # 'gce', 'aws', 'azure', 'openstack', 'vsphere', 'oci', or 'external'
|
||||
# external_cloud_provider: "" # 'openstack', 'vsphere' and 'hcloud'
|
||||
|
||||
container_engine:
|
||||
type: containerd # docker, crio and containerd
|
||||
install: true
|
||||
|
||||
ping_access_ip: true
|
||||
auto_renew_certificates: true
|
||||
event_ttl: "1h0m0s"
|
||||
pod_security_policy_enabled: true
|
||||
|
||||
network:
|
||||
plugin: calico # cilium, calico, kube-ovn, weave or flannel
|
||||
# service_addresses: 10.233.0.0/18
|
||||
# pods_subnet: 10.233.64.0/18
|
||||
|
||||
modules:
|
||||
admin_password: changeit
|
||||
|
||||
## Add additional helm repositories before installation
|
||||
# additional_repositories:
|
||||
# - name: argo-helm
|
||||
# url: "https://argoproj.github.io/argo-helm"
|
||||
|
||||
observability:
|
||||
enabled: true
|
||||
|
||||
logging:
|
||||
enabled: true
|
||||
|
||||
loki:
|
||||
persistence:
|
||||
storage_size: 10Gi
|
||||
retention: 168h
|
||||
|
||||
events:
|
||||
enabled: true
|
||||
cron:
|
||||
schedule: "*/2 * * * *"
|
||||
|
||||
tracing:
|
||||
enabled: true
|
||||
|
||||
tempo:
|
||||
retention: 24h
|
||||
listen_port: 3100
|
||||
|
||||
persistence:
|
||||
storage_size: 10Gi
|
||||
|
||||
tempo_query:
|
||||
listen_port: 16686
|
||||
|
||||
monitoring:
|
||||
enabled: true
|
||||
|
||||
prometheus:
|
||||
scrape_interval: 15s
|
||||
persistence:
|
||||
storage_size: 3Gi
|
||||
retention: 7d
|
||||
|
||||
alert_manager:
|
||||
enabled: true
|
||||
# additionalMessageTemplates: {}
|
||||
|
||||
route:
|
||||
receiver: kvazaric_notifications
|
||||
group_wait: 1s
|
||||
repeat_interval: 180m
|
||||
|
||||
routes:
|
||||
- receiver: "kvazaric_notifications"
|
||||
group_by: ["alertname"]
|
||||
group_wait: 1s
|
||||
repeat_interval: 8737h
|
||||
matchers:
|
||||
- fireOnce=true
|
||||
receivers:
|
||||
- name: kvazaric_notifications
|
||||
telegram_configs:
|
||||
- send_resolved: true
|
||||
api_url: https://api.telegram.org
|
||||
bot_token: 6364937365:AAHcJKc-McN11gBWuQqoM87zr18eK0VKX9I
|
||||
chat_id: -968770779
|
||||
parse_mode: HTML
|
||||
message: '{% raw %}{{ "{{" }} template "default-message" . {{ "}}" }}{% endraw %}'
|
||||
http_config:
|
||||
follow_redirects: true
|
||||
enable_http2: false
|
||||
|
||||
blackbox:
|
||||
enabled: true
|
||||
additional_modules: |
|
||||
|
||||
kube_state:
|
||||
enabled: true
|
||||
|
||||
node:
|
||||
enabled: true
|
||||
|
||||
visualization:
|
||||
enabled: true
|
||||
|
||||
grafana:
|
||||
enabled: true
|
||||
expose:
|
||||
type: ingress # ingress or NodePort
|
||||
domain: grafana.disk.lt.t1.cloud
|
||||
node_port_http: 30007
|
||||
|
||||
tls:
|
||||
enabled: true
|
||||
|
||||
persistence:
|
||||
storage_size: 2Gi
|
||||
|
||||
cicd:
|
||||
enabled: true
|
||||
|
||||
argo_cd:
|
||||
expose:
|
||||
type: ingress # ingress or NodePort
|
||||
domain: argocd.disk.lt.t1.cloud
|
||||
|
||||
node_port_http: 30005
|
||||
node_port_https: 30006
|
||||
|
||||
tls:
|
||||
enabled: true
|
||||
|
||||
repositories:
|
||||
{}
|
||||
# harbor-helm:
|
||||
# enableOCI: "true"
|
||||
# type: helm
|
||||
# name: helm-mountbit
|
||||
# url: harbor.disk.t1.cloud/mountbit-helm
|
||||
# username: username
|
||||
# password: password
|
||||
rbac:
|
||||
additional_policies: |
|
||||
p, developer, applications, *, */*, allow
|
||||
|
||||
p, developer, applications, *, */*logging*, deny
|
||||
p, developer, repositories, get, *, allow
|
||||
p, developer, projects, get, *, allow
|
||||
|
||||
p, developer, logs, get, *, allow
|
||||
|
||||
p, guest, applications, get, */*, allow
|
||||
p, guest, projects, get, *, allow
|
||||
|
||||
ha:
|
||||
enabled: false
|
||||
autoscaling: false
|
||||
|
||||
rollouts:
|
||||
enabled: true
|
||||
|
||||
updates_operator:
|
||||
enabled: true
|
||||
|
||||
secrets_storage:
|
||||
enabled: true
|
||||
key_shares: 5
|
||||
key_threshold: 3
|
||||
|
||||
# specify unseal keys to auto-unseal after updates or restarts
|
||||
unseal_keys:
|
||||
- "8gSX9uR1P0ypMlHN2YSwbARACE/VzBU3nF7Pg3M6mWzj"
|
||||
- "XV2MmiPbbiWpp0uzfDUTlPqtDfF8Z/HlrZKbHDZXZiGO"
|
||||
- "b3EPh7JxDLeAgXj6oMxdZronEiJ3ef9KJDazsaibD3TB"
|
||||
expose:
|
||||
type: ingress # ingress or NodePort
|
||||
domain: vault.disk.lt.t1.cloud
|
||||
node_port: 30004
|
||||
|
||||
tls:
|
||||
enabled: true
|
||||
|
||||
# requires secrets_store_csi_driver in additional modules
|
||||
csi_integration:
|
||||
enabled: true
|
||||
agent:
|
||||
image: hashicorp/vault
|
||||
tag: 1.16.0
|
||||
server:
|
||||
image: "hashicorp/vault"
|
||||
tag: 1.16.0
|
||||
persistence:
|
||||
size: 10Gi
|
||||
|
||||
registry:
|
||||
enabled: true
|
||||
expose:
|
||||
type: ingress # ingress or nodePort
|
||||
# if expose_type is "ingress"
|
||||
domain: harbor.disk.lt.t1.cloud
|
||||
|
||||
# if expose_type is "NodePort"
|
||||
node_port_http: 30002
|
||||
node_port_https: 30003
|
||||
tls:
|
||||
enabled: true
|
||||
|
||||
persistence:
|
||||
registry_size: 10Gi
|
||||
jobservice_size: 1Gi
|
||||
database_size: 2Gi
|
||||
redis_size: 1Gi
|
||||
trivy_size: 5Gi
|
||||
|
||||
defaultProjects:
|
||||
- name: harbor-helm
|
||||
public: false
|
||||
enabled_scanner: true
|
||||
|
||||
additional:
|
||||
cert_manager:
|
||||
enabled: true
|
||||
ha_enabled: false
|
||||
dns_servers:
|
||||
- "1.1.1.1"
|
||||
- "8.8.8.8"
|
||||
account_email: reversstorm@gmail.com
|
||||
|
||||
ingress:
|
||||
type: nginx # nginx
|
||||
enabled: true
|
||||
ingress_class_name: nginx
|
||||
host_network: true
|
||||
|
||||
# load_balancer:
|
||||
# type: metallb
|
||||
# install: true
|
||||
|
||||
# docker_secrets:
|
||||
# repositories:
|
||||
# - name: registry
|
||||
# repository: registry.example.com
|
||||
# username: admin
|
||||
# password: admin
|
||||
# namespaces:
|
||||
# - default
|
||||
|
||||
storage:
|
||||
local_path_provisioner:
|
||||
storage_class_name: local-path
|
||||
reclaim_policy: Delete
|
||||
|
||||
longhorn:
|
||||
enabled: true
|
||||
|
||||
secrets_store_csi_driver:
|
||||
enabled: true
|
||||
|
||||
## TODO: ceph
|
||||
Reference in New Issue
Block a user