summaryrefslogtreecommitdiff
path: root/inventory/group_vars/k8s-lwl/main.yml
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2020-04-29 14:35:33 +0200
committerChristian Pointner <equinox@spreadspace.org>2020-04-29 14:35:33 +0200
commit28d706eb225d81699a33d898044ec0a1f49a46f2 (patch)
treebc984ad1fcb0710ca3cab28a98ab6d9713648ed2 /inventory/group_vars/k8s-lwl/main.yml
parentadd lendwirbel helene and dione instance (diff)
lendwirbel: initial install of kubernetes cluster
Diffstat (limited to 'inventory/group_vars/k8s-lwl/main.yml')
-rw-r--r--inventory/group_vars/k8s-lwl/main.yml48
1 files changed, 48 insertions, 0 deletions
diff --git a/inventory/group_vars/k8s-lwl/main.yml b/inventory/group_vars/k8s-lwl/main.yml
new file mode 100644
index 00000000..e06cb665
--- /dev/null
+++ b/inventory/group_vars/k8s-lwl/main.yml
@@ -0,0 +1,48 @@
+---
+docker_pkg_provider: docker-com
+docker_pkg_name: docker-ce
+
+kubernetes_version: 1.17.5
+kubernetes_container_runtime: docker
+kubernetes_network_plugin: kubeguard
+
+kubernetes:
+ cluster_name: lndwrbl-live
+
+ dedicated_master: False
+ api_extra_sans:
+ - 178.63.180.137
+ - k8s-master.lndwrbl.live
+
+ pod_ip_range: 172.18.0.0/16
+ pod_ip_range_size: 24
+ service_ip_range: 172.18.192.0/18
+
+
+kubernetes_secrets:
+ encryption_config_keys: "{{ vault_kubernetes_encryption_config_keys }}"
+
+
+kubeguard:
+ ## node_index must be in the range between 1 and 190 -> 189 hosts possible
+ ##
+ ## hardcoded hostnames are not nice but if we do this via host_vars
+ ## the info is spread over multiple files and this makes it more diffcult
+ ## to find mistakes, so it is nicer to keep it in one place...
+ node_index:
+ # lw-live-01: 1
+ # lw-live-02: 2
+ lw-live-00: 100
+ lw-live-dist0: 110
+ lw-dione: 111
+ lw-helene: 112
+ lw-master: 127
+
+ direct_net_zones:
+ encoder:
+ transfer_net: 172.18.191.0/24
+ node_interface:
+ lw-dione: eno2
+ lw-helene: eno2
+
+kubernetes_overlay_node_ip: "{{ kubernetes.pod_ip_range | ipsubnet(kubernetes.pod_ip_range_size, kubeguard.node_index[inventory_hostname]) | ipaddr(1) | ipaddr('address') }}"