126 lines
2.9 KiB
YAML
126 lines
2.9 KiB
YAML
credentials:
|
|
user: sre-admin
|
|
ask_sudo_password: false
|
|
private_key_file: /home/sre-admin/.ssh/id_rsa
|
|
|
|
hosts:
|
|
- hostname: vbox-prod-k8s-master-01
|
|
ip: "10.250.50.22"
|
|
roles: [control_plane, etcd]
|
|
- hostname: vbox-prod-k8s-slave-01
|
|
ip: "10.250.50.23"
|
|
roles: [node]
|
|
- hostname: vbox-prod-k8s-slave-02
|
|
ip: "10.250.50.21"
|
|
roles: [node]
|
|
|
|
orchestrator:
|
|
version: v1.29.0
|
|
container_engine:
|
|
install: true
|
|
ping_access_ip: true
|
|
auto_renew_certificates: true
|
|
pod_security_policy_enabled: true
|
|
|
|
modules:
|
|
admin_password: changeit
|
|
observability:
|
|
enabled: true
|
|
logging:
|
|
enabled: true
|
|
events:
|
|
enabled: true
|
|
tracing:
|
|
enabled: true
|
|
monitoring:
|
|
enabled: true
|
|
alert_manager:
|
|
enabled: true
|
|
route:
|
|
receiver: kvazaric_notifications
|
|
group_wait: 1s
|
|
repeat_interval: 180m
|
|
routes:
|
|
- receiver: "kvazaric_notifications"
|
|
group_by: ["alertname"]
|
|
group_wait: 1s
|
|
repeat_interval: 8737h
|
|
matchers:
|
|
- fireOnce=true
|
|
receivers:
|
|
- name: kvazaric_notifications
|
|
telegram_configs:
|
|
- send_resolved: true
|
|
api_url: https://api.telegram.org
|
|
bot_token: bot_token
|
|
chat_id: -10000
|
|
parse_mode: HTML
|
|
message: '{% raw %}{{ "{{" }} template "default-message" . {{ "}}" }}{% endraw %}'
|
|
http_config:
|
|
follow_redirects: true
|
|
enable_http2: false
|
|
blackbox:
|
|
enabled: true
|
|
kube_state:
|
|
enabled: true
|
|
node:
|
|
enabled: true
|
|
visualization:
|
|
enabled: true
|
|
grafana:
|
|
enabled: true
|
|
expose:
|
|
type: ingress # ingress or NodePort
|
|
domain: grafana.disk.lt.t1.cloud
|
|
# path: "/grafana"
|
|
tls:
|
|
enabled: true
|
|
|
|
cicd:
|
|
enabled: true
|
|
argo_cd:
|
|
expose:
|
|
type: ingress # ingress or NodePort
|
|
domain: argocd.disk.lt.t1.cloud
|
|
# path: "/cicd"
|
|
tls:
|
|
enabled: true
|
|
rollouts:
|
|
enabled: true
|
|
updates_operator:
|
|
enabled: true
|
|
|
|
secrets_storage:
|
|
enabled: true
|
|
key_shares: 5
|
|
key_threshold: 3
|
|
expose:
|
|
type: ingress # ingress or NodePort
|
|
domain: vault.disk.lt.t1.cloud
|
|
tls:
|
|
enabled: true
|
|
csi_integration:
|
|
enabled: true
|
|
|
|
registry:
|
|
enabled: true
|
|
expose:
|
|
type: ingress # ingress or nodePort
|
|
domain: harbor.disk.lt.t1.cloud
|
|
tls:
|
|
enabled: true
|
|
enabled_scanner: true
|
|
|
|
additional:
|
|
cert_manager:
|
|
enabled: true
|
|
account_email: adminmail@gmail.com
|
|
ingress:
|
|
enabled: true
|
|
host_network: true
|
|
storage:
|
|
longhorn:
|
|
enabled: true
|
|
secrets_store_csi_driver:
|
|
enabled: true
|