Robert Kaussow
3b8a58e249
Author: Robert Kaussow <mail@thegeeklab.de>
Date: Mon Nov 14 09:47:14 2022 +0100
feat: add option to enable selinux in containerd
3.7 KiB
3.7 KiB
| title | type |
|---|---|
| k3s | docs |
Setup K3s cluster nodes.
- Default Variables
- k3s_init_log_enabled
- k3s_node_ip
- k3s_packages
- k3s_packages_extra
- k3s_reset
- k3s_selinux_enabled
- k3s_server
- k3s_server_admission_configuration
- k3s_server_admission_plugins
- k3s_server_bind_ip
- k3s_server_feature_gates
- k3s_server_flannel_backend_enabled
- k3s_server_manifests_templates
- k3s_server_manifests_urls
- k3s_server_network_policy_enabled
- k3s_server_nodes
- k3s_server_resource_patches
- k3s_token
- k3s_version
- Dependencies
Default Variables
k3s_init_log_enabled
Default value
k3s_init_log_enabled: false
k3s_node_ip
Default value
k3s_node_ip: '{{ ansible_default_ipv4.address }}'
k3s_packages
Default value
k3s_packages:
- epel-release
- python3-kubernetes
- container-selinux
- selinux-policy-base
k3s_packages_extra
Default value
k3s_packages_extra: []
k3s_reset
Default value
k3s_reset: false
k3s_selinux_enabled
Default value
k3s_selinux_enabled: false
k3s_server
Default value
k3s_server: true
k3s_server_admission_configuration
Default value
k3s_server_admission_configuration:
- name: EventRateLimit
configuration:
kind: Configuration
apiVersion: eventratelimit.admission.k8s.io/v1alpha1
limits:
- type: Namespace
qps: 50
burst: 100
cacheSize: 2000
- type: User
qps: 10
burst: 50
k3s_server_admission_plugins
Default value
k3s_server_admission_plugins:
- NodeRestriction
- EventRateLimit
- ServiceAccount
- NamespaceLifecycle
k3s_server_bind_ip
Default value
k3s_server_bind_ip: 0.0.0.0
k3s_server_feature_gates
Default value
k3s_server_feature_gates: []
k3s_server_flannel_backend_enabled
Default value
k3s_server_flannel_backend_enabled: true
k3s_server_manifests_templates
Default value
k3s_server_manifests_templates: []
k3s_server_manifests_urls
Default value
k3s_server_manifests_urls: []
k3s_server_network_policy_enabled
Default value
k3s_server_network_policy_enabled: true
k3s_server_nodes
Default value
k3s_server_nodes:
- '{{ ansible_hostname }}'
k3s_server_resource_patches
Default value
k3s_server_resource_patches: []
k3s_token
Default value
k3s_token: secure-token
k3s_version
Default value
k3s_version: v1.25.0+k3s1
Dependencies
None.