You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

136 lines
5.6 KiB

  1. # Valid bootstrap options (required): ubuntu, coreos, centos, none
  2. bootstrap_os: none
  3. #Directory where etcd data stored
  4. etcd_data_dir: /var/lib/etcd
  5. # Directory where the binaries will be installed
  6. bin_dir: /usr/local/bin
  7. ## The access_ip variable is used to define how other nodes should access
  8. ## the node. This is used in flannel to allow other flannel nodes to see
  9. ## this node for example. The access_ip is really useful AWS and Google
  10. ## environments where the nodes are accessed remotely by the "public" ip,
  11. ## but don't know about that address themselves.
  12. #access_ip: 1.1.1.1
  13. ### LOADBALANCING AND ACCESS MODES
  14. ## Enable multiaccess to configure etcd clients to access all of the etcd members directly
  15. ## as the "http://hostX:port, http://hostY:port, ..." and ignore the proxy loadbalancers.
  16. ## This may be the case if clients support and loadbalance multiple etcd servers natively.
  17. #etcd_multiaccess: true
  18. ### ETCD: disable peer client cert authentication.
  19. # This affects ETCD_PEER_CLIENT_CERT_AUTH variable
  20. #etcd_peer_client_auth: true
  21. ## External LB example config
  22. ## apiserver_loadbalancer_domain_name: "elb.some.domain"
  23. #loadbalancer_apiserver:
  24. # address: 1.2.3.4
  25. # port: 1234
  26. ## Internal loadbalancers for apiservers
  27. #loadbalancer_apiserver_localhost: true
  28. ## Local loadbalancer should use this port instead, if defined.
  29. ## Defaults to kube_apiserver_port (6443)
  30. #nginx_kube_apiserver_port: 8443
  31. ### OTHER OPTIONAL VARIABLES
  32. ## For some things, kubelet needs to load kernel modules. For example, dynamic kernel services are needed
  33. ## for mounting persistent volumes into containers. These may not be loaded by preinstall kubernetes
  34. ## processes. For example, ceph and rbd backed volumes. Set to true to allow kubelet to load kernel
  35. ## modules.
  36. # kubelet_load_modules: false
  37. ## Internal network total size. This is the prefix of the
  38. ## entire network. Must be unused in your environment.
  39. #kube_network_prefix: 18
  40. ## With calico it is possible to distributed routes with border routers of the datacenter.
  41. ## Warning : enabling router peering will disable calico's default behavior ('node mesh').
  42. ## The subnets of each nodes will be distributed by the datacenter router
  43. #peer_with_router: false
  44. ## Upstream dns servers used by dnsmasq
  45. #upstream_dns_servers:
  46. # - 8.8.8.8
  47. # - 8.8.4.4
  48. ## There are some changes specific to the cloud providers
  49. ## for instance we need to encapsulate packets with some network plugins
  50. ## If set the possible values are either 'gce', 'aws', 'azure', 'openstack', 'vsphere', or 'external'
  51. ## When openstack is used make sure to source in the openstack credentials
  52. ## like you would do when using nova-client before starting the playbook.
  53. #cloud_provider:
  54. ## When azure is used, you need to also set the following variables.
  55. ## see docs/azure.md for details on how to get these values
  56. #azure_tenant_id:
  57. #azure_subscription_id:
  58. #azure_aad_client_id:
  59. #azure_aad_client_secret:
  60. #azure_resource_group:
  61. #azure_location:
  62. #azure_subnet_name:
  63. #azure_security_group_name:
  64. #azure_vnet_name:
  65. #azure_route_table_name:
  66. ## When OpenStack is used, Cinder version can be explicitly specified if autodetection fails (Fixed in 1.9: https://github.com/kubernetes/kubernetes/issues/50461)
  67. #openstack_blockstorage_version: "v1/v2/auto (default)"
  68. ## When OpenStack is used, if LBaaSv2 is available you can enable it with the following 2 variables.
  69. #openstack_lbaas_enabled: True
  70. #openstack_lbaas_subnet_id: "Neutron subnet ID (not network ID) to create LBaaS VIP"
  71. ## To enable automatic floating ip provisioning, specify a subnet.
  72. #openstack_lbaas_floating_network_id: "Neutron network ID (not subnet ID) to get floating IP from, disabled by default"
  73. ## Override default LBaaS behavior
  74. #openstack_lbaas_use_octavia: False
  75. #openstack_lbaas_method: "ROUND_ROBIN"
  76. #openstack_lbaas_provider: "haproxy"
  77. #openstack_lbaas_create_monitor: "yes"
  78. #openstack_lbaas_monitor_delay: "1m"
  79. #openstack_lbaas_monitor_timeout: "30s"
  80. #openstack_lbaas_monitor_max_retries: "3"
  81. ## Uncomment to enable experimental kubeadm deployment mode
  82. #kubeadm_enabled: false
  83. #kubeadm_token_first: "{{ lookup('password', inventory_dir + '/credentials/kubeadm_token_first length=6 chars=ascii_lowercase,digits') }}"
  84. #kubeadm_token_second: "{{ lookup('password', inventory_dir + '/credentials/kubeadm_token_second length=16 chars=ascii_lowercase,digits') }}"
  85. #kubeadm_token: "{{ kubeadm_token_first }}.{{ kubeadm_token_second }}"
  86. #
  87. ## Set these proxy values in order to update package manager and docker daemon to use proxies
  88. #http_proxy: ""
  89. #https_proxy: ""
  90. ## Refer to roles/kubespray-defaults/defaults/main.yml before modifying no_proxy
  91. #no_proxy: ""
  92. ## Uncomment this if you want to force overlay/overlay2 as docker storage driver
  93. ## Please note that overlay2 is only supported on newer kernels
  94. #docker_storage_options: -s overlay2
  95. # Uncomment this if you have more than 3 nameservers, then we'll only use the first 3.
  96. #docker_dns_servers_strict: false
  97. ## Default packages to install within the cluster, f.e:
  98. #kpm_packages:
  99. # - name: kube-system/grafana
  100. ## Certificate Management
  101. ## This setting determines whether certs are generated via scripts or whether a
  102. ## cluster of Hashicorp's Vault is started to issue certificates (using etcd
  103. ## as a backend). Options are "script" or "vault"
  104. #cert_management: script
  105. # Set to true to allow pre-checks to fail and continue deployment
  106. #ignore_assert_errors: false
  107. ## Etcd auto compaction retention for mvcc key value store in hour
  108. #etcd_compaction_retention: 0
  109. ## Set level of detail for etcd exported metrics, specify 'extensive' to include histogram metrics.
  110. #etcd_metrics: basic
  111. # The read-only port for the Kubelet to serve on with no authentication/authorization. Uncomment to enable.
  112. # kube_read_only_port: 10255