92 lines
2.7 KiB
Django/Jinja
92 lines
2.7 KiB
Django/Jinja
{% set disabled_components = [] %}
|
|
|
|
## Base ##
|
|
node-name: {{ ansible_fqdn }}
|
|
{% if inventory_hostname == groups['kubernetes'][0] %}
|
|
# Initialize with internal etcd
|
|
cluster-init: true
|
|
{% else %}
|
|
# Join cluster
|
|
server: https://{{ hostvars[groups['kubernetes'][0]]['nodeip_ipv4'] }}:6443
|
|
{% endif %}
|
|
|
|
token: '{{ kubernetes.token }}'
|
|
tls-san:
|
|
- {{ kubernetes.control_plane.dns_name }}
|
|
|
|
# Networking
|
|
{% if ansible_default_ipv6 is defined and ansible_default_ipv6.address is defined %}
|
|
node-external-ip: {{ ansible_default_ipv4.address }},{{ ansible_default_ipv6.address }}
|
|
{% else %}
|
|
node-external-ip: {{ ansible_default_ipv4.address }}
|
|
{% endif %}
|
|
|
|
{% if kubernetes.network.clean_resolv_conf %}
|
|
resolv-conf: /etc/resolv-k3s.conf
|
|
{% endif %}
|
|
|
|
{% if nodeip_ipv6 != "" and kubernetes.ipPool.ipv6 is defined %}
|
|
node-ip: {{ nodeip_ipv4 }},{{ nodeip_ipv6 }}
|
|
cluster-cidr: {{ kubernetes.ipPool.ipv4.cluster_cidr }},{{ kubernetes.ipPool.ipv6.cluster_cidr }}
|
|
service-cidr: {{ kubernetes.ipPool.ipv4.service_cidr }},{{ kubernetes.ipPool.ipv6.service_cidr }}
|
|
{% else %}
|
|
node-ip: {{ nodeip_ipv4 }}
|
|
cluster-cidr: {{ kubernetes.ipPool.ipv4.cluster_cidr }}
|
|
service-cidr: {{ kubernetes.ipPool.ipv4.service_cidr }}
|
|
{% endif %}
|
|
|
|
# Pin the apiserver advertise-address to the mesh IP: node-external-ip above
|
|
# otherwise gets picked, leaking a LAN-only address into the default/kubernetes
|
|
# Endpoints object that other nodes cannot route to.
|
|
advertise-address: {{ nodeip_ipv4 }}
|
|
|
|
egress-selector-mode: disabled
|
|
|
|
# Network-plugin
|
|
{% if kubernetes.network.plugin == "flannel" %}
|
|
flannel-backend: vxlan
|
|
{% else %}
|
|
disable-network-policy: true
|
|
flannel-backend: none
|
|
{% if kubernetes.network.plugin == "cilium" %}
|
|
# Cilium requires servicelb to be disabled when replacing kube-proxy
|
|
{% set _ = disabled_components.append('servicelb') %}
|
|
{% endif %}
|
|
{% endif %}
|
|
|
|
# Ingress-plugin
|
|
{% if kubernetes.ingress_controller != "traefik-ingress" %}
|
|
{% set _ = disabled_components.append('traefik') %}
|
|
{% endif %}
|
|
|
|
## Label
|
|
# Region & DC
|
|
node-label:
|
|
{% if region is defined %}
|
|
- topology.kubernetes.io/region={{ region }}
|
|
{% endif %}
|
|
{% if zone is defined %}
|
|
- topology.kubernetes.io/zone={{ zone }}
|
|
{% endif %}
|
|
{% if kubernetes.labels_extra is defined %}
|
|
{% for item in kubernetes.labels_extra %}
|
|
- {{ item }}
|
|
{% endfor %}
|
|
{% endif %}
|
|
|
|
# Disabled components
|
|
{% if disabled_components %}
|
|
disable: {{ disabled_components | join(',') }}
|
|
{% endif %}
|
|
|
|
{{ kubernetes.config_extra | to_yaml }}
|
|
|
|
# Image garbage collection tuning (drop-in KubeletConfiguration)
|
|
kubelet-arg:
|
|
- config-dir=/etc/rancher/k3s/kubelet.conf.d
|
|
{% if not kubernetes.config_extra['disable-etcd'] | default(false) %}
|
|
|
|
# etcd members only
|
|
{{ kubernetes.etcd_config_extra | to_nice_yaml(indent=2) }}
|
|
{% endif %}
|