You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

34 lines
972 B

  1. ---
  2. # Instance settings
  3. cloud_image: centos-7
  4. mode: ha
  5. # Kubespray settings
  6. kubeadm_control_plane: true
  7. kubeadm_certificate_key: 3998c58db6497dd17d909394e62d515368c06ec617710d02edea31c06d741085
  8. kube_proxy_mode: iptables
  9. kube_network_plugin: flannel
  10. helm_enabled: true
  11. kubernetes_audit: true
  12. container_manager: containerd
  13. etcd_events_cluster_enabled: true
  14. local_volume_provisioner_enabled: true
  15. etcd_deployment_type: host
  16. deploy_netchecker: true
  17. dns_min_replicas: 1
  18. kube_encrypt_secret_data: true
  19. ingress_nginx_enabled: true
  20. cert_manager_enabled: true
  21. # Disable as health checks are still unstable and slow to respond.
  22. metrics_server_enabled: false
  23. metrics_server_kubelet_insecure_tls: true
  24. kube_token_auth: true
  25. kube_basic_auth: true
  26. enable_nodelocaldns: false
  27. kube_oidc_url: https://accounts.google.com/.well-known/openid-configuration
  28. kube_oidc_client_id: kubespray-example
  29. tls_min_version: "VersionTLS12"
  30. tls_cipher_suites:
  31. - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256