blob: 5cf36e1bfc9fe8ce16647d6751930d3f55c8ddb9 [file] [log] [blame]
Andrey Shestakov718e3f42018-04-24 12:51:24 +03001classes:
Victor Ryzhenkinea144702018-10-10 03:52:04 +04002- system.etcd.server.cluster
Sergey Kolekonov8ad29592018-10-25 18:44:37 +04003- system.salt.minion.cert.k8s_server
Andrey Shestakov718e3f42018-04-24 12:51:24 +03004- service.kubernetes.control.cluster
Andrey Shestakov718e3f42018-04-24 12:51:24 +03005- system.haproxy.proxy.listen.kubernetes.apiserver
Victor Ryzhenkinafeea292018-06-07 16:58:58 +04006- system.keepalived.cluster.instance.kube_api_server_vip
Andrey Shestakov718e3f42018-04-24 12:51:24 +03007- system.linux.system.repo.docker_legacy
8- system.salt.minion.cert.etcd_server
9- system.kubernetes.master.cluster
Victor Ryzhenkin97dbb872018-06-18 17:01:18 +040010- system.kubernetes.master.auth.rbac
Victor Ryzhenkinb9e412e2018-05-29 20:07:19 +040011- system.kubernetes.control.roles.cluster-admin
Victor Ryzhenkin105ee212018-07-24 17:22:56 +040012- system.kubernetes.control.roles.genie-pod-patch
Andrey Shestakov718e3f42018-04-24 12:51:24 +030013- cluster.k8s-ha-calico-flannel-virtlet.kubernetes.compute
14- cluster.k8s-ha-calico-flannel-virtlet
15parameters:
16 _param:
Victor Ryzhenkinafeea292018-06-07 16:58:58 +040017 keepalived_k8s_apiserver_vip_interface: ${_param:primary_interface}
18 keepalived_k8s_apiserver_vip_address: ${_param:kubernetes_control_address}
19 keepalived_k8s_apiserver_vip_password: password
Andrey Shestakov718e3f42018-04-24 12:51:24 +030020 etcd:
21 server:
22 bind:
23 host: ${_param:deploy_address}
24 source:
25 engine: docker_hybrid
26 ssl:
27 enabled: true
28 setup:
29 calico:
Andrey Shestakovbb543b32018-10-08 18:28:45 +030030 key: /calico/ipam/v2/assignment/ipv4/block/${_param:calico_private_network}-${_param:calico_private_netmask}
Andrey Shestakov718e3f42018-04-24 12:51:24 +030031 value: '{"masquerade":true,"cidr":"${_param:calico_private_network}/${_param:calico_private_netmask}"}'
32 kubernetes:
33 common:
34 addons:
35 dashboard:
36 enabled: ${_param:kubernetes_dashboard}
37 image: ${_param:kubernetes_dashboard_image}
38 helm:
39 enabled: ${_param:kubernetes_helm_enabled}
Andrey Shestakov718e3f42018-04-24 12:51:24 +030040 netchecker:
41 enabled: ${_param:kubernetes_netchecker_enabled}
Andrey Shestakov718e3f42018-04-24 12:51:24 +030042 agent_probeurls: ${_param:kubernetes_netchecker_agent_probeurls}
43 dns:
44 enabled: ${_param:kubernetes_dns}
45 kubedns_image: ${_param:kubernetes_kubedns_image}
46 dnsmasq_image: ${_param:kubernetes_dnsmasq_image}
47 sidecar_image: ${_param:kubernetes_sidecar_image}
48 autoscaler:
49 image: ${_param:kubernetes_dns_autoscaler_image}
50 coredns:
51 enabled: ${_param:kubernetes_coredns_enabled}
52 externaldns:
53 enabled: ${_param:kubernetes_externaldns_enabled}
54 image: ${_param:kubernetes_externaldns_image}
55 provider: ${_param:kubernetes_externaldns_provider}
Vladimir Jigulin7bc766b2018-07-17 14:42:36 +040056 metallb:
57 enabled: ${_param:kubernetes_metallb_enabled}
58 addresses:
59 - ${_param:kubernetes_metallb_addresses_pool}
Vladimir Jigulinb8114182018-10-03 10:19:29 +040060 ingress-nginx:
61 enabled: ${_param:kubernetes_ingressnginx_enabled}
Andrey Shestakov718e3f42018-04-24 12:51:24 +030062 master:
63 kubelet:
64 address: ${_param:single_address}
65 fail_on_swap: ${_param:kubelet_fail_on_swap}
66 etcd:
67 ssl:
68 enabled: true
69 network:
70 genie:
71 enabled: true
72 default_plugin: calico
73 image: ${_param:kubernetes_genie_image}
74 flannel:
75 enabled: true
76 private_ip_range: 10.20.0.0/16
77 calico:
78 enabled: true
Aleksei Kasatkin83a3d1d2018-08-24 14:18:25 +020079 image: ${_param:kubernetes_calico_image}
80 calicoctl_image: ${_param:kubernetes_calico_calicoctl_image}
81 cni_image: ${_param:kubernetes_calico_cni_image}
82 kube_controllers_image: ${_param:kubernetes_calico_kube_controllers_image}
Andrey Shestakov718e3f42018-04-24 12:51:24 +030083 etcd:
84 ssl:
85 enabled: true
Aleksei Kasatkin83a3d1d2018-08-24 14:18:25 +020086 policy:
87 enabled: ${_param:kubernetes_calico_policy_enabled}
Andrey Shestakov718e3f42018-04-24 12:51:24 +030088 namespace:
89 netchecker:
90 enabled: true