You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

337 lines
12 KiB

7 years ago
  1. ---
  2. local_release_dir: /tmp
  3. # Used to only evaluate vars from download role
  4. skip_downloads: false
  5. # if this is set to true will only download files once. Doesn't work
  6. # on Container Linux by CoreOS unless the download_localhost is true and localhost
  7. # is running another OS type. Default compress level is 1 (fastest).
  8. download_run_once: False
  9. download_compress: 1
  10. # if this is set to true, uses the localhost for download_run_once mode
  11. # (requires docker and sudo to access docker). You may want this option for
  12. # local caching of docker images or for Container Linux by CoreOS cluster nodes.
  13. # Otherwise, uses the first node in the kube-master group to store images
  14. # in the download_run_once mode.
  15. download_localhost: False
  16. # Always pull images if set to True. Otherwise check by the repo's tag/digest.
  17. download_always_pull: False
  18. # Use the first kube-master if download_localhost is not set
  19. download_delegate: "{% if download_localhost %}localhost{% else %}{{groups['kube-master'][0]}}{% endif %}"
  20. # Versions
  21. kube_version: v1.8.3
  22. kubeadm_version: "{{ kube_version }}"
  23. etcd_version: v3.2.4
  24. # TODO(mattymo): Move calico versions to roles/network_plugins/calico/defaults
  25. # after migration to container download
  26. calico_version: "v2.6.2"
  27. calico_ctl_version: "v1.6.1"
  28. calico_cni_version: "v1.11.0"
  29. calico_policy_version: "v1.0.0"
  30. calico_rr_version: "v0.4.0"
  31. flannel_version: "v0.9.0"
  32. flannel_cni_version: "v0.3.0"
  33. weave_version: 2.0.5
  34. pod_infra_version: 3.0
  35. # Download URLs
  36. kubeadm_download_url: "https://storage.googleapis.com/kubernetes-release/release/{{ kubeadm_version }}/bin/linux/amd64/kubeadm"
  37. # Checksums
  38. kubeadm_checksum: "ea1c53b88e6e562c9c0ae4f523b56fa7f83850c4894f619a24c069e0130f417d"
  39. istio_version: "0.2.6"
  40. istioctl_download_url: "https://storage.googleapis.com/istio-release/releases/{{ istio_version }}/istioctl/istioctl-linux"
  41. istioctl_checksum: fd703063c540b8c0ab943f478c05ab257d88ae27224c746a27d0526ddbf7c370
  42. vault_version: 0.8.1
  43. vault_binary_checksum: 3c4d70ba71619a43229e65c67830e30e050eab7a81ac6b28325ff707e5914188
  44. vault_download_url: "https://releases.hashicorp.com/vault/{{ vault_version }}/vault_{{ vault_version }}_linux_amd64.zip"
  45. vault_image_repo: "vault"
  46. vault_image_tag: "{{ vault_version }}"
  47. # Containers
  48. etcd_image_repo: "quay.io/coreos/etcd"
  49. etcd_image_tag: "{{ etcd_version }}"
  50. flannel_image_repo: "quay.io/coreos/flannel"
  51. flannel_image_tag: "{{ flannel_version }}"
  52. flannel_cni_image_repo: "quay.io/coreos/flannel-cni"
  53. flannel_cni_image_tag: "{{ flannel_cni_version }}"
  54. calicoctl_image_repo: "quay.io/calico/ctl"
  55. calicoctl_image_tag: "{{ calico_ctl_version }}"
  56. calico_node_image_repo: "quay.io/calico/node"
  57. calico_node_image_tag: "{{ calico_version }}"
  58. calico_cni_image_repo: "quay.io/calico/cni"
  59. calico_cni_image_tag: "{{ calico_cni_version }}"
  60. calico_policy_image_repo: "quay.io/calico/kube-controllers"
  61. calico_policy_image_tag: "{{ calico_policy_version }}"
  62. calico_rr_image_repo: "quay.io/calico/routereflector"
  63. calico_rr_image_tag: "{{ calico_rr_version }}"
  64. hyperkube_image_repo: "quay.io/coreos/hyperkube"
  65. hyperkube_image_tag: "{{ kube_version }}_coreos.0"
  66. pod_infra_image_repo: "gcr.io/google_containers/pause-amd64"
  67. pod_infra_image_tag: "{{ pod_infra_version }}"
  68. install_socat_image_repo: "xueshanf/install-socat"
  69. install_socat_image_tag: "latest"
  70. netcheck_version: "v1.0"
  71. netcheck_agent_img_repo: "quay.io/l23network/k8s-netchecker-agent"
  72. netcheck_agent_tag: "{{ netcheck_version }}"
  73. netcheck_server_img_repo: "quay.io/l23network/k8s-netchecker-server"
  74. netcheck_server_tag: "{{ netcheck_version }}"
  75. weave_kube_image_repo: "weaveworks/weave-kube"
  76. weave_kube_image_tag: "{{ weave_version }}"
  77. weave_npc_image_repo: "weaveworks/weave-npc"
  78. weave_npc_image_tag: "{{ weave_version }}"
  79. nginx_image_repo: nginx
  80. nginx_image_tag: 1.11.4-alpine
  81. dnsmasq_version: 2.78
  82. dnsmasq_image_repo: "andyshinn/dnsmasq"
  83. dnsmasq_image_tag: "{{ dnsmasq_version }}"
  84. kubedns_version: 1.14.7
  85. kubedns_image_repo: "gcr.io/google_containers/k8s-dns-kube-dns-amd64"
  86. kubedns_image_tag: "{{ kubedns_version }}"
  87. dnsmasq_nanny_image_repo: "gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64"
  88. dnsmasq_nanny_image_tag: "{{ kubedns_version }}"
  89. dnsmasq_sidecar_image_repo: "gcr.io/google_containers/k8s-dns-sidecar-amd64"
  90. dnsmasq_sidecar_image_tag: "{{ kubedns_version }}"
  91. kubednsautoscaler_version: 1.1.1
  92. kubednsautoscaler_image_repo: "gcr.io/google_containers/cluster-proportional-autoscaler-amd64"
  93. kubednsautoscaler_image_tag: "{{ kubednsautoscaler_version }}"
  94. test_image_repo: busybox
  95. test_image_tag: latest
  96. elasticsearch_version: "v2.4.1"
  97. elasticsearch_image_repo: "gcr.io/google_containers/elasticsearch"
  98. elasticsearch_image_tag: "{{ elasticsearch_version }}"
  99. fluentd_version: "1.22"
  100. fluentd_image_repo: "gcr.io/google_containers/fluentd-elasticsearch"
  101. fluentd_image_tag: "{{ fluentd_version }}"
  102. kibana_version: "v4.6.1"
  103. kibana_image_repo: "gcr.io/google_containers/kibana"
  104. kibana_image_tag: "{{ kibana_version }}"
  105. helm_version: "v2.7.2"
  106. helm_image_repo: "lachlanevenson/k8s-helm"
  107. helm_image_tag: "{{ helm_version }}"
  108. tiller_image_repo: "gcr.io/kubernetes-helm/tiller"
  109. tiller_image_tag: "{{ helm_version }}"
  110. downloads:
  111. netcheck_server:
  112. enabled: "{{ deploy_netchecker }}"
  113. container: true
  114. repo: "{{ netcheck_server_img_repo }}"
  115. tag: "{{ netcheck_server_tag }}"
  116. sha256: "{{ netcheck_server_digest_checksum|default(None) }}"
  117. netcheck_agent:
  118. enabled: "{{ deploy_netchecker }}"
  119. container: true
  120. repo: "{{ netcheck_agent_img_repo }}"
  121. tag: "{{ netcheck_agent_tag }}"
  122. sha256: "{{ netcheck_agent_digest_checksum|default(None) }}"
  123. etcd:
  124. enabled: true
  125. container: true
  126. repo: "{{ etcd_image_repo }}"
  127. tag: "{{ etcd_image_tag }}"
  128. sha256: "{{ etcd_digest_checksum|default(None) }}"
  129. kubeadm:
  130. enabled: "{{ kubeadm_enabled }}"
  131. file: true
  132. version: "{{ kubeadm_version }}"
  133. dest: "kubeadm"
  134. sha256: "{{ kubeadm_checksum }}"
  135. source_url: "{{ kubeadm_download_url }}"
  136. url: "{{ kubeadm_download_url }}"
  137. unarchive: false
  138. owner: "root"
  139. mode: "0755"
  140. istioctl:
  141. enabled: "{{ istio_enabled }}"
  142. file: true
  143. version: "{{ istio_version }}"
  144. dest: "istio/istioctl"
  145. sha256: "{{ istioctl_checksum }}"
  146. source_url: "{{ istioctl_download_url }}"
  147. url: "{{ istioctl_download_url }}"
  148. unarchive: false
  149. owner: "root"
  150. mode: "0755"
  151. hyperkube:
  152. enabled: true
  153. container: true
  154. repo: "{{ hyperkube_image_repo }}"
  155. tag: "{{ hyperkube_image_tag }}"
  156. sha256: "{{ hyperkube_digest_checksum|default(None) }}"
  157. flannel:
  158. enabled: "{{ kube_network_plugin == 'flannel' or kube_network_plugin == 'canal' }}"
  159. container: true
  160. repo: "{{ flannel_image_repo }}"
  161. tag: "{{ flannel_image_tag }}"
  162. sha256: "{{ flannel_digest_checksum|default(None) }}"
  163. flannel_cni:
  164. enabled: "{{ kube_network_plugin == 'flannel' }}"
  165. container: true
  166. repo: "{{ flannel_cni_image_repo }}"
  167. tag: "{{ flannel_cni_image_tag }}"
  168. sha256: "{{ flannel_cni_digest_checksum|default(None) }}"
  169. calicoctl:
  170. enabled: "{{ kube_network_plugin == 'calico' or kube_network_plugin == 'canal' }}"
  171. container: true
  172. repo: "{{ calicoctl_image_repo }}"
  173. tag: "{{ calicoctl_image_tag }}"
  174. sha256: "{{ calicoctl_digest_checksum|default(None) }}"
  175. calico_node:
  176. enabled: "{{ kube_network_plugin == 'calico' or kube_network_plugin == 'canal' }}"
  177. container: true
  178. repo: "{{ calico_node_image_repo }}"
  179. tag: "{{ calico_node_image_tag }}"
  180. sha256: "{{ calico_node_digest_checksum|default(None) }}"
  181. calico_cni:
  182. enabled: "{{ kube_network_plugin == 'calico' or kube_network_plugin == 'canal' }}"
  183. container: true
  184. repo: "{{ calico_cni_image_repo }}"
  185. tag: "{{ calico_cni_image_tag }}"
  186. sha256: "{{ calico_cni_digest_checksum|default(None) }}"
  187. calico_policy:
  188. enabled: "{{ enable_network_policy or kube_network_plugin == 'canal' }}"
  189. container: true
  190. repo: "{{ calico_policy_image_repo }}"
  191. tag: "{{ calico_policy_image_tag }}"
  192. sha256: "{{ calico_policy_digest_checksum|default(None) }}"
  193. calico_rr:
  194. enabled: "{{ peer_with_calico_rr is defined and peer_with_calico_rr}} and kube_network_plugin == 'calico'"
  195. container: true
  196. repo: "{{ calico_rr_image_repo }}"
  197. tag: "{{ calico_rr_image_tag }}"
  198. sha256: "{{ calico_rr_digest_checksum|default(None) }}"
  199. weave_kube:
  200. enabled: "{{ kube_network_plugin == 'weave' }}"
  201. container: true
  202. repo: "{{ weave_kube_image_repo }}"
  203. tag: "{{ weave_kube_image_tag }}"
  204. sha256: "{{ weave_kube_digest_checksum|default(None) }}"
  205. weave_npc:
  206. enabled: "{{ kube_network_plugin == 'weave' }}"
  207. container: true
  208. repo: "{{ weave_npc_image_repo }}"
  209. tag: "{{ weave_npc_image_tag }}"
  210. sha256: "{{ weave_npc_digest_checksum|default(None) }}"
  211. pod_infra:
  212. enabled: true
  213. container: true
  214. repo: "{{ pod_infra_image_repo }}"
  215. tag: "{{ pod_infra_image_tag }}"
  216. sha256: "{{ pod_infra_digest_checksum|default(None) }}"
  217. install_socat:
  218. enabled: "{{ ansible_os_family in ['CoreOS', 'Container Linux by CoreOS'] }}"
  219. container: true
  220. repo: "{{ install_socat_image_repo }}"
  221. tag: "{{ install_socat_image_tag }}"
  222. sha256: "{{ install_socat_digest_checksum|default(None) }}"
  223. nginx:
  224. enabled: true
  225. container: true
  226. repo: "{{ nginx_image_repo }}"
  227. tag: "{{ nginx_image_tag }}"
  228. sha256: "{{ nginx_digest_checksum|default(None) }}"
  229. dnsmasq:
  230. enabled: "{{ dns_mode == 'dnsmasq_kubedns' }}"
  231. container: true
  232. repo: "{{ dnsmasq_image_repo }}"
  233. tag: "{{ dnsmasq_image_tag }}"
  234. sha256: "{{ dnsmasq_digest_checksum|default(None) }}"
  235. kubedns:
  236. enabled: true
  237. container: true
  238. repo: "{{ kubedns_image_repo }}"
  239. tag: "{{ kubedns_image_tag }}"
  240. sha256: "{{ kubedns_digest_checksum|default(None) }}"
  241. dnsmasq_nanny:
  242. enabled: true
  243. container: true
  244. repo: "{{ dnsmasq_nanny_image_repo }}"
  245. tag: "{{ dnsmasq_nanny_image_tag }}"
  246. sha256: "{{ dnsmasq_nanny_digest_checksum|default(None) }}"
  247. dnsmasq_sidecar:
  248. enabled: true
  249. container: true
  250. repo: "{{ dnsmasq_sidecar_image_repo }}"
  251. tag: "{{ dnsmasq_sidecar_image_tag }}"
  252. sha256: "{{ dnsmasq_sidecar_digest_checksum|default(None) }}"
  253. kubednsautoscaler:
  254. enabled: true
  255. container: true
  256. repo: "{{ kubednsautoscaler_image_repo }}"
  257. tag: "{{ kubednsautoscaler_image_tag }}"
  258. sha256: "{{ kubednsautoscaler_digest_checksum|default(None) }}"
  259. testbox:
  260. enabled: true
  261. container: true
  262. repo: "{{ test_image_repo }}"
  263. tag: "{{ test_image_tag }}"
  264. sha256: "{{ testbox_digest_checksum|default(None) }}"
  265. elasticsearch:
  266. enabled: "{{ efk_enabled }}"
  267. container: true
  268. repo: "{{ elasticsearch_image_repo }}"
  269. tag: "{{ elasticsearch_image_tag }}"
  270. sha256: "{{ elasticsearch_digest_checksum|default(None) }}"
  271. fluentd:
  272. enabled: "{{ efk_enabled }}"
  273. container: true
  274. repo: "{{ fluentd_image_repo }}"
  275. tag: "{{ fluentd_image_tag }}"
  276. sha256: "{{ fluentd_digest_checksum|default(None) }}"
  277. kibana:
  278. enabled: "{{ efk_enabled }}"
  279. container: true
  280. repo: "{{ kibana_image_repo }}"
  281. tag: "{{ kibana_image_tag }}"
  282. sha256: "{{ kibana_digest_checksum|default(None) }}"
  283. helm:
  284. enabled: "{{ helm_enabled }}"
  285. container: true
  286. repo: "{{ helm_image_repo }}"
  287. tag: "{{ helm_image_tag }}"
  288. sha256: "{{ helm_digest_checksum|default(None) }}"
  289. tiller:
  290. enabled: "{{ helm_enabled }}"
  291. container: true
  292. repo: "{{ tiller_image_repo }}"
  293. tag: "{{ tiller_image_tag }}"
  294. sha256: "{{ tiller_digest_checksum|default(None) }}"
  295. vault:
  296. enabled: "{{ cert_management == 'vault' }}"
  297. container: "{{ vault_deployment_type != 'host' }}"
  298. file: "{{ vault_deployment_type == 'host' }}"
  299. dest: "vault/vault_{{ vault_version }}_linux_amd64.zip"
  300. mode: "0755"
  301. owner: "vault"
  302. repo: "{{ vault_image_repo }}"
  303. sha256: "{{ vault_binary_checksum if vault_deployment_type == 'host' else vault_digest_checksum|d(none) }}"
  304. source_url: "{{ vault_download_url }}"
  305. tag: "{{ vault_image_tag }}"
  306. unarchive: true
  307. url: "{{ vault_download_url }}"
  308. version: "{{ vault_version }}"
  309. download_defaults:
  310. container: false
  311. file: false
  312. repo: None
  313. tag: None
  314. enabled: false
  315. dest: None
  316. version: None
  317. url: None
  318. unarchive: false
  319. owner: kube
  320. mode: None