[DO-143] Final prepare for env k8s avroid_prod (!2)

DO-1431

Co-authored-by: denis.patrakeev <denis.patrakeev@avroid.tech>
Reviewed-on: https://git.avroid.tech/K8s/k8s-deploy/pulls/2
This commit is contained in:
Denis Patrakeev
2024-12-20 19:44:28 +03:00
parent 1a23ae209b
commit d4535fb8bc
33 changed files with 265 additions and 1135 deletions

View File

@@ -17,9 +17,9 @@ bin_dir: /usr/local/bin
# port: 1234
## Internal loadbalancers for apiservers
# loadbalancer_apiserver_localhost: true
loadbalancer_apiserver_localhost: true
# valid options are "nginx" or "haproxy"
# loadbalancer_apiserver_type: nginx # valid values "nginx" or "haproxy"
loadbalancer_apiserver_type: nginx
## Local loadbalancer should use this port
## And must be set port 6443
@@ -36,9 +36,10 @@ loadbalancer_apiserver_healthcheck_port: 8081
# disable_host_nameservers: false
## Upstream dns servers
# upstream_dns_servers:
# - 8.8.8.8
# - 8.8.4.4
upstream_dns_servers:
- 10.2.4.10
- 10.2.4.20
- 10.3.0.101
## There are some changes specific to the cloud providers
## for instance we need to encapsulate packets with some network plugins
@@ -83,7 +84,7 @@ no_proxy_exclude_workers: false
## This setting determines whether certs are generated via scripts.
## Chose 'none' if you provide your own certificates.
## Option is "script", "none"
# cert_management: script
cert_management: script
## Set to true to allow pre-checks to fail and continue deployment
# ignore_assert_errors: false
@@ -92,7 +93,7 @@ no_proxy_exclude_workers: false
# kube_read_only_port: 10255
## Set true to download and cache container
# download_container: true
download_container: true
## Deploy container engine
# Set false if you want to deploy container engine manually.
@@ -124,13 +125,14 @@ kube_webhook_token_auth_url_skip_tls_verify: false
## NTP Settings
# Start the ntpd or chrony service and enable it at system boot.
ntp_enabled: false
ntp_manage_config: false
ntp_enabled: true
ntp_manage_config: true
ntp_servers:
- "0.pool.ntp.org iburst"
- "1.pool.ntp.org iburst"
- "2.pool.ntp.org iburst"
- "3.pool.ntp.org iburst"
- "ntp-01.avroid.tech iburst"
- "ntp-02.avroid.tech iburst"
- "ntp-03.avroid.tech iburst"
# Set timezone
ntp_timezone: Europe/Moscow
## Used to control no_log attribute
unsafe_show_logs: false