actualized for kubespray version 2.28.0

kubespray/inventory/group_vars/all/containerd.yml

@@ -45,12 +45,15 @@ containerd_state_dir:  /app/containerd-state
 # containerd_metrics_grpc_histogram: false
 
 # Registries defined within containerd.
-# containerd_registries_mirrors:
-#  - prefix: docker.io
-#    mirrors:
-#     - host: https://registry-1.docker.io
-#       capabilities: ["pull", "resolve"]
-#       skip_verify: false
+containerd_registries_mirrors:
+  - prefix: docker.io
+    mirrors:
+      - host: https://mirror.gcr.io
+        capabilities: ["pull", "resolve"]
+        skip_verify: false
+      - host: https://quay.io
+        capabilities: ["pull", "resolve"]
+        skip_verify: false
 
 # containerd_max_container_log_line_size: -1
 

kubespray/inventory/group_vars/k8s_cluster/addons.yml

@@ -12,7 +12,7 @@ local_path_provisioner_enabled: true
 # local_path_provisioner_namespace: "local-path-storage"
 local_path_provisioner_storage_class: local-path
 local_path_provisioner_reclaim_policy: Delete
-local_path_provisioner_claim_root: /opt/local-path-provisioner/
+local_path_provisioner_claim_root: /app/local-path-provisioner
 # local_path_provisioner_debug: false
 # local_path_provisioner_image_repo: "rancher/local-path-provisioner"
 # local_path_provisioner_image_tag: "v0.0.23"

kubespray/inventory/group_vars/k8s_cluster/k8s-cluster.yml

@@ -17,7 +17,7 @@ kube_token_dir: "{{ kube_config_dir }}/tokens"
 kube_api_anonymous_auth: true
 
 ## Change this to use another Kubernetes version, e.g. a current beta release
-kube_version: v1.29.0
+kube_version: 1.32.4
 
 # Where the binaries will be downloaded.
 # Note: ensure that you've enough disk space (about 1G)
@@ -226,15 +226,6 @@ dns_domain: "{{ cluster_name }}"
 ## docker for docker, crio for cri-o and containerd for containerd.
 ## Default: containerd
 container_manager: containerd
-containerd_registries_mirrors:
-  - prefix: docker.io
-    mirrors:
-      - host: https://mirror.gcr.io
-        capabilities: ["pull", "resolve"]
-        skip_verify: false
-      - host: https://quay.io
-        capabilities: ["pull", "resolve"]
-        skip_verify: false
 
 ## CRI-O registry mirrors setup
 crio_registries:
@@ -401,7 +392,7 @@ auto_renew_certificates: true
 # auto_renew_certificates_systemd_calendar: "Mon *-*-1,2,3,4,5,6,7 03:{{ groups['kube_control_plane'].index(inventory_hostname) }}0:00"
 
 # kubeadm patches path
-kubeadm_patches:
-  enabled: false
-  source_dir: "{{ inventory_dir }}/patches"
-  dest_dir: "{{ kube_config_dir }}/patches"
+kubeadm_patches: []
+## Kubelet additional settings
+kubelet_custom_flags:
+  - "--root-dir=/app/k8s/kubelet"

kubespray/inventory/hosts

@@ -1,39 +1,17 @@
 
-t1-disk-lt-k8s-master-01 ansible_host=10.100.20.43 ip=10.100.20.43  
-t1-disk-lt-k8s-master-02 ansible_host=10.100.20.38 ip=10.100.20.38  
-t1-disk-lt-k8s-master-03 ansible_host=10.100.20.42 ip=10.100.20.42  
-t1-disk-lt-k8s-slave-01 ansible_host=10.100.20.40 ip=10.100.20.40  
-t1-disk-lt-k8s-slave-02 ansible_host=10.100.20.41 ip=10.100.20.41  
-t1-disk-lt-k8s-slave-03 ansible_host=10.100.20.39 ip=10.100.20.39  
-t1-disk-lt-k8s-slave-04 ansible_host=10.100.20.45 ip=10.100.20.45  
-t1-disk-lt-k8s-slave-05 ansible_host=10.100.20.44 ip=10.100.20.44  
-t1-disk-lt-k8s-slave-06 ansible_host=10.100.20.50 ip=10.100.20.50  
-t1-disk-lt-k8s-slave-07 ansible_host=10.100.20.51 ip=10.100.20.51  
+k8s-master-1 ansible_host=172.16.1.136 ip=172.16.1.136  
+k8s-worker-1 ansible_host=172.16.1.135 ip=172.16.1.135  
 
 [kube_control_plane]
-t1-disk-lt-k8s-master-01
-t1-disk-lt-k8s-master-02
-t1-disk-lt-k8s-master-03
+k8s-master-1
 
 [etcd]
-t1-disk-lt-k8s-master-01
-t1-disk-lt-k8s-master-02
-t1-disk-lt-k8s-master-03
+k8s-master-1
 
 [kube_node]
-t1-disk-lt-k8s-slave-01
-t1-disk-lt-k8s-slave-02
-t1-disk-lt-k8s-slave-03
-t1-disk-lt-k8s-slave-04
-t1-disk-lt-k8s-slave-05
-t1-disk-lt-k8s-slave-06
-t1-disk-lt-k8s-slave-07
-
-[k8s_cluster:children]
-kube_control_plane
-kube_node
+k8s-worker-1
 
 [all:vars]
 ansible_connection=ssh
-ansible_user=sre-admin
-ansible_ssh_private_key_file=/Users/georgest/.ssh/id_rsa_bastion_ift
+ansible_user=georgest
+ansible_ssh_private_key_file=/Users/georgest/.ssh/id_rsa