2e0b57ad93
This PS drives basic CNI options via ansible playbook in the KubeADM-AIO container and modifies the calico chart to support configuration via values. Change-Id: Iaf2f9807438c3a34e797c62c2c6913edb677997c
163 lines
4.4 KiB
YAML
163 lines
4.4 KiB
YAML
# Copyright 2017 The Openstack-Helm Authors.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# http://docs.projectcalico.org/v2.4/getting-started/kubernetes/installation/hosted/kubeadm/1.6/calico.yaml
|
|
# Calico Version v2.4.1
|
|
# https://docs.projectcalico.org/v2.4/releases#v2.4.1
|
|
# This manifest includes the following component versions:
|
|
# calico/node:v2.4.1
|
|
# calico/cni:v1.10.0
|
|
# calico/kube-policy-controller:v0.7.0
|
|
|
|
labels:
|
|
node_selector_key: openstack-control-plane
|
|
node_selector_value: enabled
|
|
|
|
images:
|
|
tags:
|
|
calico_etcd: quay.io/coreos/etcd:v3.1.10
|
|
calico_node: quay.io/calico/node:v2.6.5
|
|
calico_cni: quay.io/calico/cni:v1.11.2
|
|
calico_kube_controllers: quay.io/calico/kube-controllers:v1.0.2
|
|
dep_check: quay.io/stackanetes/kubernetes-entrypoint:v0.2.1
|
|
image_repo_sync: docker.io/docker:17.07.0
|
|
pull_policy: IfNotPresent
|
|
local_registry:
|
|
active: false
|
|
exclude:
|
|
- dep_check
|
|
- image_repo_sync
|
|
- calico_etcd
|
|
- calico_node
|
|
- calico_cni
|
|
- calico_kube_policy_controller
|
|
|
|
pod:
|
|
annotations:
|
|
calico_node:
|
|
prometheus_port: 9091
|
|
prometheus_scrape: true
|
|
resources:
|
|
enabled: false
|
|
jobs:
|
|
image_repo_sync:
|
|
requests:
|
|
memory: "128Mi"
|
|
cpu: "100m"
|
|
limits:
|
|
memory: "1024Mi"
|
|
cpu: "2000m"
|
|
|
|
dependencies:
|
|
etcd:
|
|
services: null
|
|
calico_node:
|
|
services:
|
|
- service: etcd
|
|
endpoint: internal
|
|
calico_kube_controllers:
|
|
services:
|
|
- service: etcd
|
|
endpoint: internal
|
|
|
|
conditional_dependencies:
|
|
local_image_registry:
|
|
jobs:
|
|
- calico-image-repo-sync
|
|
services:
|
|
- service: local_image_registry
|
|
endpoint: node
|
|
|
|
endpoints:
|
|
cluster_domain_suffix: cluster.local
|
|
local_image_registry:
|
|
name: docker-registry
|
|
namespace: docker-registry
|
|
hosts:
|
|
default: localhost
|
|
internal: docker-registry
|
|
node: localhost
|
|
host_fqdn_override:
|
|
default: null
|
|
port:
|
|
registry:
|
|
node: 5000
|
|
etcd:
|
|
hosts:
|
|
default: calico-etcd
|
|
host_fqdn_override:
|
|
default: null
|
|
port:
|
|
client:
|
|
default: 6666
|
|
peer:
|
|
default: 6667
|
|
|
|
networking:
|
|
podSubnet: 192.168.0.0/16
|
|
#NOTE(portdirect): this should be the physical MTU, the appropriate MTU
|
|
# that calico should use will be calculated.
|
|
mtu: 1500
|
|
|
|
conf:
|
|
cni_network_config:
|
|
name: k8s-pod-network
|
|
cniVersion: 0.1.0
|
|
type: calico
|
|
etcd_endpoints: __ETCD_ENDPOINTS__
|
|
log_level: info
|
|
mtu: null
|
|
ipam:
|
|
type: calico-ipam
|
|
policy:
|
|
type: k8s
|
|
k8s_api_root: https://__KUBERNETES_SERVICE_HOST__:__KUBERNETES_SERVICE_PORT__
|
|
k8s_auth_token: __SERVICEACCOUNT_TOKEN__
|
|
kubernetes:
|
|
kubeconfig: "/etc/cni/net.d/__KUBECONFIG_FILENAME__"
|
|
node:
|
|
# Cluster type to identify the deployment type
|
|
CLUSTER_TYPE:
|
|
- kubeadm
|
|
- bgp
|
|
# Disable file logging so `kubectl logs` works.
|
|
CALICO_DISABLE_FILE_LOGGING: "true"
|
|
# Set Felix endpoint to host default action to ACCEPT.
|
|
FELIX_DEFAULTENDPOINTTOHOSTACTION: "ACCEPT"
|
|
# Configure the IP Pool from which Pod IPs will be chosen.
|
|
CALICO_IPV4POOL_CIDR: null
|
|
# Change this to 'off' in environments with direct L2 communication
|
|
CALICO_IPV4POOL_IPIP: "always"
|
|
# Disable IPv6 on Kubernetes.
|
|
FELIX_IPV6SUPPORT: "false"
|
|
# Set MTU for tunnel device used if ipip is enabled
|
|
FELIX_IPINIPMTU: null
|
|
# Set Felix logging to "info"
|
|
FELIX_LOGSEVERITYSCREEN: "info"
|
|
FELIX_HEALTHENABLED: "true"
|
|
# Set Felix experimental Prometheus metrics server
|
|
FELIX_PROMETHEUSMETRICSENABLED: "true"
|
|
FELIX_PROMETHEUSMETRICSPORT: "9091"
|
|
# Auto-detect the BGP IP address.
|
|
IP: ""
|
|
|
|
manifests:
|
|
configmap_bin: true
|
|
configmap_calico_config: true
|
|
daemonset_calico_etcd: true
|
|
daemonset_calico_node: true
|
|
deployment_calico_kube_controllers: true
|
|
job_image_repo_sync: true
|
|
service_calico_etcd: true
|