kube-forge v2: embede python with ansible (kubespray) and cobra as cli building tool

config.sample.yaml

@@ -1,27 +1,27 @@
 credentials:
-  user: sre-admin
+  user: georgest
   ask_sudo_password: false
-  private_key_file: /Users/georgest/.ssh/id_rsa_bastion_ift
+  private_key_file: /Users/georgest/.ssh/id_rsa
 
 hosts:
-  - hostname: t1-disk-lt-k8s-test-master-01
-    ip: "10.100.20.47"
+  - hostname: k8s-master-1
+    ip: "172.16.1.136"
     roles: [control_plane, etcd]
 
-  - hostname: t1-disk-lt-k8s-test-slave-01
-    ip: "10.100.20.48"
+  - hostname: k8s-worker-1
+    ip: "172.16.1.135"
     roles: [node]
 
-  - hostname: t1-disk-lt-k8s-test-slave-02
-    ip: "10.100.20.49"
+  - hostname: k8s-worker-2
+    ip: "172.16.1.137"
     roles: [node]
 
 orchestrator:
-  version: v1.32
+  version: "1.32.4"
   cluster_name: cluster.local
   kubelet_dir: "/app/k8s/kubelet"
-  proxy_mode: "ipvs" # iptables, ipvs
-  proxy_scheduler: "rr"
+  proxy_mode: "ipvs"
+  proxy_scheduler: "lc"
   container_engine:
     install: true
     type: "containerd"
@@ -33,27 +33,6 @@ orchestrator:
       - 8.8.4.4
       - 1.1.1.1
     disable_host_nameservers: false
-    coredns_external_zones:
-      []
-      # - zones:
-      #     - example.com
-      #     - example.io:1053
-      #   nameservers:
-      #     - 1.1.1.1
-      #     - 2.2.2.2
-      #   cache: 5
-      # - zones:
-      #     - https://mycompany.local:4453
-      #   nameservers:
-      #     - 192.168.0.53
-      #   cache: 0
-      # - zones:
-      #     - mydomain.tld
-      #   nameservers:
-      #     - 10.233.0.3
-      #   cache: 5
-      #   rewrite:
-      #     - name website.tld website.namespace.svc.cluster.local
   ping_access_ip: true
   auto_renew_certificates: true
   pod_security_policy_enabled: true
@@ -64,24 +43,10 @@ orchestrator:
       skip_verify: false
 
 modules:
-  admin_password: changeit
-
-  observability:
-    enabled: false
-
-  cicd:
-    enabled: false
-
-  secrets_storage:
-    enabled: false
-
-  registry:
-    enabled: false
-
   additional:
     cert_manager:
       enabled: true
-      account_email: g.stykalin@rockitsoft.ru
+      account_email: gstykalin@mail.ru
     storage:
       local_path_provisioner:
         data_dir: "/app/local-path-provisioner"