Skip to content

Instantly share code, notes, and snippets.

@eherot
Created April 1, 2019 18:24
Show Gist options
  • Save eherot/1155563339accd3eec07385c63c6bb6a to your computer and use it in GitHub Desktop.
Save eherot/1155563339accd3eec07385c63c6bb6a to your computer and use it in GitHub Desktop.
Staging cluster kubernetes manifest
apiVersion: kops/v1alpha2
kind: Cluster
metadata:
creationTimestamp: null
name: kops-cluster.staging.k8s
spec:
additionalPolicies:
node: |
[
{
"Action": [
"sts:AssumeRole"
],
"Effect": "Allow",
"Resource": [
"arn:aws:iam::267230788984:role/secure-payment-serv",
"arn:aws:iam::267230788984:role/ReadLambdaLogs"
]
},
{
"Action": [
"ec2:*Volume"
],
"Effect": "Allow",
"Resource": [
"*"
]
}
]
api:
loadBalancer:
type: Internal
authorization:
rbac: {}
channel: stable
cloudProvider: aws
configBase: s3://gb-staging-kops-state/kops-cluster.staging.k8s
dnsZone: staging.k8s
docker:
logDriver: json-file
logLevel: warn
logOpt:
- max-size=10m
- max-file=5
storage: overlay2
etcdClusters:
- etcdMembers:
- instanceGroup: master-us-east-1a
name: a
- instanceGroup: master-us-east-1b
name: b
- instanceGroup: master-us-east-1c
name: c
name: main
- etcdMembers:
- instanceGroup: master-us-east-1a
name: a
- instanceGroup: master-us-east-1b
name: b
- instanceGroup: master-us-east-1c
name: c
name: events
hooks:
- before:
- network-pre.target
- kubelet.service
manifest: |
Type=oneshot
ExecStart=/usr/sbin/modprobe br_netfilter
[Unit]
Wants=network-pre.target
[Install]
WantedBy=multi-user.target
name: fix-dns.service
roles:
- Node
- Master
iam:
allowContainerRegistry: true
legacy: false
kubelet:
anonymousAuth: false
kubernetesApiAccess:
- 0.0.0.0/0
kubernetesVersion: 1.11.8
masterInternalName: api.internal.kops-cluster.staging.k8s
masterPublicName: api.kops-cluster.staging.k8s
networkCIDR: 172.30.0.0/16
networkID: vpc-21945c47
networking:
flannel:
backend: vxlan
nonMasqueradeCIDR: 100.64.0.0/10
sshAccess:
- 0.0.0.0/0
subnets:
- cidr: 172.30.128.0/21
name: us-east-1a
type: Private
zone: us-east-1a
- cidr: 172.30.136.0/21
name: us-east-1b
type: Private
zone: us-east-1b
- cidr: 172.30.144.0/21
name: us-east-1c
type: Private
zone: us-east-1c
- cidr: 172.30.32.0/23
name: utility-us-east-1a
type: Utility
zone: us-east-1a
- cidr: 172.30.34.0/23
name: utility-us-east-1b
type: Utility
zone: us-east-1b
- cidr: 172.30.36.0/23
name: utility-us-east-1c
type: Utility
zone: us-east-1c
topology:
dns:
type: Private
masters: private
nodes: private
updatePolicy: external
---
apiVersion: kops/v1alpha2
kind: InstanceGroup
metadata:
creationTimestamp: 2018-02-05T23:41:24Z
labels:
kops.k8s.io/cluster: kops-cluster.staging.k8s
name: master-us-east-1a
spec:
associatePublicIp: false
image: aws-marketplace/CoreOS-stable-1855.4.0-hvm-0d1e0bd0-eaea-4397-9a3a-c56f861d2a14-ami-08eda98e6fe1f83d6.4
machineType: m3.medium
maxSize: 1
minSize: 1
nodeLabels:
kops.k8s.io/instancegroup: master-us-east-1a
role: Master
subnets:
- us-east-1a
---
apiVersion: kops/v1alpha2
kind: InstanceGroup
metadata:
creationTimestamp: 2018-02-05T23:41:24Z
labels:
kops.k8s.io/cluster: kops-cluster.staging.k8s
name: master-us-east-1b
spec:
associatePublicIp: false
image: aws-marketplace/CoreOS-stable-1855.4.0-hvm-0d1e0bd0-eaea-4397-9a3a-c56f861d2a14-ami-08eda98e6fe1f83d6.4
machineType: m3.medium
maxSize: 1
minSize: 1
nodeLabels:
kops.k8s.io/instancegroup: master-us-east-1b
role: Master
subnets:
- us-east-1b
---
apiVersion: kops/v1alpha2
kind: InstanceGroup
metadata:
creationTimestamp: 2018-02-05T23:41:24Z
labels:
kops.k8s.io/cluster: kops-cluster.staging.k8s
name: master-us-east-1c
spec:
associatePublicIp: false
image: aws-marketplace/CoreOS-stable-1855.4.0-hvm-0d1e0bd0-eaea-4397-9a3a-c56f861d2a14-ami-08eda98e6fe1f83d6.4
machineType: m3.medium
maxSize: 1
minSize: 1
nodeLabels:
kops.k8s.io/instancegroup: master-us-east-1c
role: Master
subnets:
- us-east-1c
---
apiVersion: kops/v1alpha2
kind: InstanceGroup
metadata:
creationTimestamp: 2018-11-30T17:17:42Z
labels:
kops.k8s.io/cluster: kops-cluster.staging.k8s
name: monitoring-nodes
spec:
associatePublicIp: false
image: aws-marketplace/CoreOS-stable-1911.4.0-hvm-0d1e0bd0-eaea-4397-9a3a-c56f861d2a14-ami-0f51520e8e4a1fbe7.4
machineType: c4.large
maxSize: 2
minSize: 1
nodeLabels:
kops.k8s.io/instancegroup: monitoring-nodes
monitoring: enabled
run_type: ephemeral
role: Node
subnets:
- us-east-1c
taints:
- monitoring=enabled:NoSchedule
---
apiVersion: kops/v1alpha2
kind: InstanceGroup
metadata:
creationTimestamp: 2018-02-05T23:41:24Z
labels:
kops.k8s.io/cluster: kops-cluster.staging.k8s
name: nodes
spec:
associatePublicIp: false
image: aws-marketplace/CoreOS-stable-1855.4.0-hvm-0d1e0bd0-eaea-4397-9a3a-c56f861d2a14-ami-08eda98e6fe1f83d6.4
machineType: c4.large
maxSize: 6
minSize: 1
nodeLabels:
kops.k8s.io/instancegroup: nodes
run_type: ephemeral
role: Node
subnets:
- us-east-1a
- us-east-1b
- us-east-1c
---
apiVersion: kops/v1alpha2
kind: InstanceGroup
metadata:
creationTimestamp: 2019-01-10T19:43:18Z
labels:
kops.k8s.io/cluster: kops-cluster.staging.k8s
name: stateful-nodes-us-east-1a
spec:
image: aws-marketplace/CoreOS-stable-1911.5.0-hvm-0d1e0bd0-eaea-4397-9a3a-c56f861d2a14-ami-0b1db01d775d666c2.4
machineType: m3.medium
maxSize: 2
minSize: 1
nodeLabels:
kops.k8s.io/instancegroup: stateful-nodes-us-east-1a
run_type: stateful
role: Node
subnets:
- us-east-1a
taints:
- stateful=true:NoSchedule
---
apiVersion: kops/v1alpha2
kind: InstanceGroup
metadata:
creationTimestamp: 2019-01-10T19:43:51Z
labels:
kops.k8s.io/cluster: kops-cluster.staging.k8s
name: stateful-nodes-us-east-1b
spec:
image: aws-marketplace/CoreOS-stable-1911.5.0-hvm-0d1e0bd0-eaea-4397-9a3a-c56f861d2a14-ami-0b1db01d775d666c2.4
machineType: m3.medium
maxSize: 2
minSize: 1
nodeLabels:
kops.k8s.io/instancegroup: stateful-nodes-us-east-1b
run_type: stateful
role: Node
subnets:
- us-east-1b
taints:
- stateful=true:NoSchedule
---
apiVersion: kops/v1alpha2
kind: InstanceGroup
metadata:
creationTimestamp: 2019-01-10T19:45:28Z
labels:
kops.k8s.io/cluster: kops-cluster.staging.k8s
name: stateful-nodes-us-east-1c
spec:
image: aws-marketplace/CoreOS-stable-1911.5.0-hvm-0d1e0bd0-eaea-4397-9a3a-c56f861d2a14-ami-0b1db01d775d666c2.4
machineType: m3.medium
maxSize: 2
minSize: 1
nodeLabels:
kops.k8s.io/instancegroup: stateful-nodes-us-east-1c
run_type: stateful
role: Node
subnets:
- us-east-1c
taints:
- stateful=true:NoSchedule
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment