XTesting/kubespray/inventory/local/group_vars/k8s_cluster/addons.yml

   1 ---
   2 # Kubernetes dashboard
   3 # RBAC required. see docs/getting-started.md for access details.
   4 # dashboard_enabled: false
   5
   6 # Helm deployment
   7 helm_enabled: false
   8
   9 # Registry deployment
  10 registry_enabled: false
  11 # registry_namespace: kube-system
  12 # registry_storage_class: ""
  13 # registry_disk_size: "10Gi"
  14
  15 # Metrics Server deployment
  16 metrics_server_enabled: false
  17 # metrics_server_container_port: 4443
  18 # metrics_server_kubelet_insecure_tls: true
  19 # metrics_server_metric_resolution: 15s
  20 # metrics_server_kubelet_preferred_address_types: "InternalIP,ExternalIP,Hostname"
  21
  22 # Rancher Local Path Provisioner
  23 local_path_provisioner_enabled: false
  24 # local_path_provisioner_namespace: "local-path-storage"
  25 # local_path_provisioner_storage_class: "local-path"
  26 # local_path_provisioner_reclaim_policy: Delete
  27 # local_path_provisioner_claim_root: /opt/local-path-provisioner/
  28 # local_path_provisioner_debug: false
  29 # local_path_provisioner_image_repo: "rancher/local-path-provisioner"
  30 # local_path_provisioner_image_tag: "v0.0.22"
  31 # local_path_provisioner_helper_image_repo: "busybox"
  32 # local_path_provisioner_helper_image_tag: "latest"
  33
  34 # Local volume provisioner deployment
  35 local_volume_provisioner_enabled: false
  36 # local_volume_provisioner_namespace: kube-system
  37 # local_volume_provisioner_nodelabels:
  38 #   - kubernetes.io/hostname
  39 #   - topology.kubernetes.io/region
  40 #   - topology.kubernetes.io/zone
  41 # local_volume_provisioner_storage_classes:
  42 #   local-storage:
  43 #     host_dir: /mnt/disks
  44 #     mount_dir: /mnt/disks
  45 #     volume_mode: Filesystem
  46 #     fs_type: ext4
  47 #   fast-disks:
  48 #     host_dir: /mnt/fast-disks
  49 #     mount_dir: /mnt/fast-disks
  50 #     block_cleaner_command:
  51 #       - "/scripts/shred.sh"
  52 #       - "2"
  53 #     volume_mode: Filesystem
  54 #     fs_type: ext4
  55 # local_volume_provisioner_tolerations:
  56 #   - effect: NoSchedule
  57 #     operator: Exists
  58
  59 # CSI Volume Snapshot Controller deployment, set this to true if your CSI is able to manage snapshots
  60 # currently, setting cinder_csi_enabled=true would automatically enable the snapshot controller
  61 # Longhorn is an extenal CSI that would also require setting this to true but it is not included in kubespray
  62 # csi_snapshot_controller_enabled: false
  63 # csi snapshot namespace
  64 # snapshot_controller_namespace: kube-system
  65
  66 # CephFS provisioner deployment
  67 cephfs_provisioner_enabled: false
  68 # cephfs_provisioner_namespace: "cephfs-provisioner"
  69 # cephfs_provisioner_cluster: ceph
  70 # cephfs_provisioner_monitors: "172.24.0.1:6789,172.24.0.2:6789,172.24.0.3:6789"
  71 # cephfs_provisioner_admin_id: admin
  72 # cephfs_provisioner_secret: secret
  73 # cephfs_provisioner_storage_class: cephfs
  74 # cephfs_provisioner_reclaim_policy: Delete
  75 # cephfs_provisioner_claim_root: /volumes
  76 # cephfs_provisioner_deterministic_names: true
  77
  78 # RBD provisioner deployment
  79 rbd_provisioner_enabled: false
  80 # rbd_provisioner_namespace: rbd-provisioner
  81 # rbd_provisioner_replicas: 2
  82 # rbd_provisioner_monitors: "172.24.0.1:6789,172.24.0.2:6789,172.24.0.3:6789"
  83 # rbd_provisioner_pool: kube
  84 # rbd_provisioner_admin_id: admin
  85 # rbd_provisioner_secret_name: ceph-secret-admin
  86 # rbd_provisioner_secret: ceph-key-admin
  87 # rbd_provisioner_user_id: kube
  88 # rbd_provisioner_user_secret_name: ceph-secret-user
  89 # rbd_provisioner_user_secret: ceph-key-user
  90 # rbd_provisioner_user_secret_namespace: rbd-provisioner
  91 # rbd_provisioner_fs_type: ext4
  92 # rbd_provisioner_image_format: "2"
  93 # rbd_provisioner_image_features: layering
  94 # rbd_provisioner_storage_class: rbd
  95 # rbd_provisioner_reclaim_policy: Delete
  96
  97 # Nginx ingress controller deployment
  98 ingress_nginx_enabled: false
  99 # ingress_nginx_host_network: false
 100 ingress_publish_status_address: ""
 101 # ingress_nginx_nodeselector:
 102 #   kubernetes.io/os: "linux"
 103 # ingress_nginx_tolerations:
 104 #   - key: "node-role.kubernetes.io/master"
 105 #     operator: "Equal"
 106 #     value: ""
 107 #     effect: "NoSchedule"
 108 #   - key: "node-role.kubernetes.io/control-plane"
 109 #     operator: "Equal"
 110 #     value: ""
 111 #     effect: "NoSchedule"
 112 # ingress_nginx_namespace: "ingress-nginx"
 113 # ingress_nginx_insecure_port: 80
 114 # ingress_nginx_secure_port: 443
 115 # ingress_nginx_configmap:
 116 #   map-hash-bucket-size: "128"
 117 #   ssl-protocols: "TLSv1.2 TLSv1.3"
 118 # ingress_nginx_configmap_tcp_services:
 119 #   9000: "default/example-go:8080"
 120 # ingress_nginx_configmap_udp_services:
 121 #   53: "kube-system/coredns:53"
 122 # ingress_nginx_extra_args:
 123 #   - --default-ssl-certificate=default/foo-tls
 124 # ingress_nginx_termination_grace_period_seconds: 300
 125 # ingress_nginx_class: nginx
 126
 127 # ALB ingress controller deployment
 128 ingress_alb_enabled: false
 129 # alb_ingress_aws_region: "us-east-1"
 130 # alb_ingress_restrict_scheme: "false"
 131 # Enables logging on all outbound requests sent to the AWS API.
 132 # If logging is desired, set to true.
 133 # alb_ingress_aws_debug: "false"
 134
 135 # Cert manager deployment
 136 cert_manager_enabled: false
 137 # cert_manager_namespace: "cert-manager"
 138 # cert_manager_tolerations:
 139 #   - key: node-role.kubernetes.io/master
 140 #     effect: NoSchedule
 141 #   - key: node-role.kubernetes.io/control-plane
 142 #     effect: NoSchedule
 143 # cert_manager_affinity:
 144 #  nodeAffinity:
 145 #    preferredDuringSchedulingIgnoredDuringExecution:
 146 #    - weight: 100
 147 #      preference:
 148 #        matchExpressions:
 149 #        - key: node-role.kubernetes.io/control-plane
 150 #          operator: In
 151 #          values:
 152 #          - ""
 153 # cert_manager_nodeselector:
 154 #   kubernetes.io/os: "linux"
 155
 156 # cert_manager_trusted_internal_ca: |
 157 #   -----BEGIN CERTIFICATE-----
 158 #   [REPLACE with your CA certificate]
 159 #   -----END CERTIFICATE-----
 160 # cert_manager_leader_election_namespace: kube-system
 161
 162 # MetalLB deployment
 163 metallb_enabled: false
 164 metallb_speaker_enabled: true
 165 # metallb_ip_range:
 166 #   - "10.5.0.50-10.5.0.99"
 167 # metallb_pool_name: "loadbalanced"
 168 # metallb_auto_assign: true
 169 # metallb_avoid_buggy_ips: false
 170 # metallb_speaker_nodeselector:
 171 #   kubernetes.io/os: "linux"
 172 # metallb_controller_nodeselector:
 173 #   kubernetes.io/os: "linux"
 174 # metallb_speaker_tolerations:
 175 #   - key: "node-role.kubernetes.io/master"
 176 #     operator: "Equal"
 177 #     value: ""
 178 #     effect: "NoSchedule"
 179 #   - key: "node-role.kubernetes.io/control-plane"
 180 #     operator: "Equal"
 181 #     value: ""
 182 #     effect: "NoSchedule"
 183 # metallb_controller_tolerations:
 184 #   - key: "node-role.kubernetes.io/master"
 185 #     operator: "Equal"
 186 #     value: ""
 187 #     effect: "NoSchedule"
 188 #   - key: "node-role.kubernetes.io/control-plane"
 189 #     operator: "Equal"
 190 #     value: ""
 191 #     effect: "NoSchedule"
 192 # metallb_version: v0.12.1
 193 # metallb_protocol: "layer2"
 194 # metallb_port: "7472"
 195 # metallb_memberlist_port: "7946"
 196 # metallb_additional_address_pools:
 197 #   kube_service_pool:
 198 #     ip_range:
 199 #       - "10.5.1.50-10.5.1.99"
 200 #     protocol: "layer2"
 201 #     auto_assign: false
 202 #     avoid_buggy_ips: false
 203 # metallb_protocol: "bgp"
 204 # metallb_peers:
 205 #   - peer_address: 192.0.2.1
 206 #     peer_asn: 64512
 207 #     my_asn: 4200000000
 208 #   - peer_address: 192.0.2.2
 209 #     peer_asn: 64513
 210 #     my_asn: 4200000000
 211
 212 argocd_enabled: false
 213 # argocd_version: v2.4.7
 214 # argocd_namespace: argocd
 215 # Default password:
 216 #   - https://argo-cd.readthedocs.io/en/stable/getting_started/#4-login-using-the-cli
 217 #   ---
 218 #   The initial password is autogenerated to be the pod name of the Argo CD API server. This can be retrieved with the command:
 219 #   kubectl get pods -n argocd -l app.kubernetes.io/name=argocd-server -o name | cut -d'/' -f 2
 220 #   ---
 221 # Use the following var to set admin password
 222 # argocd_admin_password: "password"
 223
 224 # The plugin manager for kubectl
 225 krew_enabled: false
 226 krew_root_dir: "/usr/local/krew"