|
|
@ -154,6 +154,10 @@ kubectl_localhost: false |
|
|
|
# K8s image pull policy (imagePullPolicy) |
|
|
|
k8s_image_pull_policy: IfNotPresent |
|
|
|
|
|
|
|
# Kubernetes dashboard |
|
|
|
# RBAC required. see docs/getting-started.md for access details. |
|
|
|
dashboard_enabled: true |
|
|
|
|
|
|
|
# Addons which can be enabled |
|
|
|
efk_enabled: false |
|
|
|
helm_enabled: false |
|
|
@ -198,6 +202,26 @@ vault_config_dir: "{{ vault_base_dir }}/config" |
|
|
|
vault_roles_dir: "{{ vault_base_dir }}/roles" |
|
|
|
vault_secrets_dir: "{{ vault_base_dir }}/secrets" |
|
|
|
|
|
|
|
## Running on top of openstack vms with cinder enabled may lead to unschedulable pods due to NoVolumeZoneConflict restriction in kube-scheduler. |
|
|
|
## See https://github.com/kubernetes-incubator/kubespray/issues/2141 |
|
|
|
## Set this variable to true to get rid of this issue |
|
|
|
volume_cross_zone_attachment: false |
|
|
|
|
|
|
|
# weave's network password for encryption |
|
|
|
# if null then no network encryption |
|
|
|
# you can use --extra-vars to pass the password in command line |
|
|
|
weave_password: EnterPasswordHere |
|
|
|
|
|
|
|
# Weave uses consensus mode by default |
|
|
|
# Enabling seed mode allow to dynamically add or remove hosts |
|
|
|
# https://www.weave.works/docs/net/latest/ipam/ |
|
|
|
weave_mode_seed: false |
|
|
|
|
|
|
|
# This two variable are automatically changed by the weave's role in group_vars/k8s-cluster.yml. |
|
|
|
# Do not manually change these values |
|
|
|
weave_seed: uninitialized |
|
|
|
weave_peers: uninitialized |
|
|
|
|
|
|
|
## Set no_proxy to all assigned cluster IPs and hostnames |
|
|
|
no_proxy: >- |
|
|
|
{%- if loadbalancer_apiserver is defined -%} |
|
|
|