*** Wartungsfenster jeden ersten Mittwoch vormittag im Monat ***

Skip to content
Snippets Groups Projects
Commit 88935d85 authored by Weber, Thomas's avatar Weber, Thomas
Browse files

add cni toggle

parent 30b635ed
No related branches found
No related tags found
1 merge request!1Restore main as the default branch
...@@ -27,18 +27,20 @@ Use roles inside a Ansible playbook ...@@ -27,18 +27,20 @@ Use roles inside a Ansible playbook
## Variables ## Variables
| Variable | Default | Description | | Variable | Default | Description |
| ------------------ | ------------------------------------ | -------------------------------------------------------------- | | ------------------ | ------------------------------------ | ------------------------------------------------------------------------------------------- |
| cluster_name | | Name of the RKE2 cluster | | cluster_name | | Name of the RKE2 cluster |
| server_count | 3 | Number of RKE2 worker VMs | | server_count | 3 | Number of RKE2 worker VMs |
| agent_count | 3 | Number of RKE2 server VMs | | agent_count | 3 | Number of RKE2 server VMs |
| server_flavor | m1a.large | Server VM flavor | | server_flavor | m1a.large | Server VM flavor |
| agent_flavor | m1a.xlarge | Worker VM flavor | | agent_flavor | m1a.xlarge | Worker VM flavor |
| server_volume_size | 50 | Volume size (GB) for server VM | | server_volume_size | 50 | Volume size (GB) for server VM |
| agent_volume_size | 100 | Volume size (GB) for worker VM | | agent_volume_size | 100 | Volume size (GB) for worker VM |
| image | 1fe615f0-9dad-447d-bf54-9071defafb77 | ID for OpenStack VM image | | image | 1fe615f0-9dad-447d-bf54-9071defafb77 | ID for OpenStack VM image |
| domain | | DNS-Entry for loadbalancer IP | | domain | | DNS-Entry for loadbalancer IP |
| node_taints | | Node taints for RKE2 node | | node_taints | | Node taints for RKE2 node |
| node_labels | | Node labels for RKE2 node | | node_labels | | Node labels for RKE2 node |
| rke2_channel | stable | RKE3 version channel | | rke2_channel | stable | RKE3 version channel |
| state | present | Flag for setup (`present`) or removing (`absent`) RKE3 cluster | | state | present | Flag for setup (`present`) or removing (`absent`) RKE3 cluster |
| registry_mirrors | {} | [rke2-docs](https://docs.rke2.io/install/containerd_registry_configuration/#mirrors) |
| manifests | {} | [defualts](collections/ansible_collections/adls/osrancher/roles/rke2/defaults/main.yml#L58) |
state: present
upgrade: no
dist_upgrade: no
reboot: no
domain: domain:
server: "https://{{ domain }}:9345" server: "https://{{ domain }}:9345"
...@@ -38,13 +43,8 @@ registry_mirrors: {} ...@@ -38,13 +43,8 @@ registry_mirrors: {}
# auth: --SEE_ABOVE-- # auth: --SEE_ABOVE--
# tls: --SEE_ABOVE-- # tls: --SEE_ABOVE--
state: present
upgrade: no
dist_upgrade: no
reboot: no
manifests: {} # used to override default_manifests manifests: {} # used to override default_manifests
manifests_config: "{{ default_manifests | combine(manifests) }}"
default_manifests: default_manifests:
config-rke2-coredns: config-rke2-coredns:
enabled: false enabled: false
......
...@@ -40,8 +40,21 @@ resolv-conf: "{{ resolv_conf_server }}" ...@@ -40,8 +40,21 @@ resolv-conf: "{{ resolv_conf_server }}"
write-kubeconfig-mode: "0644" write-kubeconfig-mode: "0644"
kube-apiserver-arg: "--enable-admission-plugins=NodeRestriction,PodSecurityPolicy,PodNodeSelector,PodTolerationRestriction,DenyServiceExternalIPs" kube-apiserver-arg: "--enable-admission-plugins=NodeRestriction,PodSecurityPolicy,PodNodeSelector,PodTolerationRestriction,DenyServiceExternalIPs"
{% if cni is defined and cni | length > 0 %}
cni: "{{ cni }}"
{% elif manifests_config.calico.enabled and manifests_config.cilium.enabled%}
cni: multus,calico,cilium
{% elif manifests_config.calico.enabled%}
cni: calico
{% elif manifests_config.cilium.enabled%}
cni: cilium
{% endif %}
{% if cni is defined and cni | length > 0 %} {% if cni is defined and cni | length > 0 %}
cni: "{{ cni }}" cni: "{{ cni }}"
{% elseif (default_manifests | combine(manifests)). %}
{% endif %} {% endif %}
{% if tls_san is defined and tls_san | length > 0 %} {% if tls_san is defined and tls_san | length > 0 %}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment