You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

33 lines
963 B

  1. ---
  2. # Instance settings
  3. cloud_image: centos-7
  4. mode: ha
  5. # Kubespray settings
  6. kubeadm_certificate_key: 3998c58db6497dd17d909394e62d515368c06ec617710d02edea31c06d741085
  7. kube_proxy_mode: iptables
  8. kube_network_plugin: flannel
  9. helm_enabled: true
  10. kubernetes_audit: true
  11. container_manager: containerd
  12. etcd_events_cluster_enabled: true
  13. local_volume_provisioner_enabled: true
  14. etcd_deployment_type: host
  15. deploy_netchecker: true
  16. dns_min_replicas: 1
  17. kube_encrypt_secret_data: true
  18. ingress_nginx_enabled: true
  19. cert_manager_enabled: true
  20. # Disable as health checks are still unstable and slow to respond.
  21. metrics_server_enabled: false
  22. metrics_server_kubelet_insecure_tls: true
  23. kube_token_auth: true
  24. enable_nodelocaldns: false
  25. kubelet_rotate_server_certificates: true
  26. kube_oidc_url: https://accounts.google.com/.well-known/openid-configuration
  27. kube_oidc_client_id: kubespray-example
  28. tls_min_version: "VersionTLS12"
  29. tls_cipher_suites:
  30. - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256