-
Notifications
You must be signed in to change notification settings - Fork 1.4k
/
tectonic.libvirt.yaml
115 lines (96 loc) · 3.85 KB
/
tectonic.libvirt.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
admin:
email: a@b.c
password: verysecure
sshKey: "ssh-ed25519 AAAA..."
# The base DNS domain of the cluster. It must NOT contain a trailing period. Some
# DNS providers will automatically add this if necessary.
#
# Example: `openshift.example.com`.
#
# Note: This field MUST be set manually prior to creating the cluster.
baseDomain:
libvirt:
uri: qemu:///system
network:
name: tectonic
ifName: tt0
dnsServer: 8.8.8.8
ipRange: 192.168.124.0/24
imagePath: /path/to/image
ca:
# (optional) The content of the PEM-encoded CA certificate, used to generate Tectonic Console's server certificate.
# If left blank, a CA certificate will be automatically generated.
# cert:
# (optional) The content of the PEM-encoded CA key, used to generate Tectonic Console's server certificate.
# This field is mandatory if `ca_cert` is set.
# key:
# (optional) The algorithm used to generate ca_key.
# The default value is currently recommended.
# This field is mandatory if `ca_cert` is set.
# keyAlg: RSA
containerLinux:
# (optional) The Container Linux update channel.
#
# Examples: `stable`, `beta`, `alpha`
channel: beta
# The Container Linux version to use. Set to `latest` to select the latest available version for the selected update channel.
#
# Examples: `latest`, `1465.6.0`
version: latest
# (optional) A list of PEM encoded CA files that will be installed in /etc/ssl/certs on master and worker nodes.
# customCAPEMList:
iscsi:
# (optional) Start iscsid.service to enable iscsi volume attachment.
# enabled: false
master:
nodePools:
- master
# The name of the cluster.
# If used in a cloud-environment, this will be prepended to `baseDomain` resulting in the URL to the Tectonic console.
#
# Note: This field MUST be set manually prior to creating the cluster.
# Warning: Special characters in the name like '.' may cause errors on OpenStack platforms due to resource name constraints.
name:
networking:
# (optional) This declares the MTU used by Calico.
# mtu:
# (optional) This declares the IP range to assign Kubernetes pod IPs in CIDR notation.
podCIDR: 10.2.0.0/16
# (optional) This declares the IP range to assign Kubernetes service cluster IPs in CIDR notation.
# The maximum size of this IP range is /12
serviceCIDR: 10.3.0.0/16
# (optional) Configures the network to be used in Tectonic. One of the following values can be used:
#
# - "flannel": enables overlay networking only. This is implemented by flannel using VXLAN.
#
# - "canal": enables overlay networking including network policy. Overlay is implemented by flannel using VXLAN. Network policy is implemented by Calico.
#
# - "calico-ipip": [ALPHA] enables BGP based networking. Routing and network policy is implemented by Calico. Note this has been tested on baremetal installations only.
#
# - "none": disables the installation of any Pod level networking layer provided by Tectonic. By setting this value, users are expected to deploy their own solution to enable network connectivity for Pods and Services.
# type: flannel
nodePools:
# The number of master nodes to be created.
# This applies only to cloud platforms.
- count: 1
name: master
# The number of worker nodes to be created.
# This applies only to cloud platforms.
- count: 2
name: worker
# The platform used for deploying.
platform: libvirt
# The path the pull secret file in JSON format.
# This is known to be a "Docker pull secret" as produced by the docker login [1] command.
# A sample JSON content is shown in [2].
# You can download the pull secret from your Account overview page at [3].
#
# [1] https://docs.docker.com/engine/reference/commandline/login/
#
# [2] https://coreos.com/os/docs/latest/registry-authentication.html#manual-registry-auth-setup
#
# [3] https://account.coreos.com/overview
pullSecretPath:
worker:
nodePools:
- worker