Skip to content

Instantly share code, notes, and snippets.

@kioqq
Created June 26, 2019 12:52
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kioqq/0e7c053a524aef1ad77be4b49425fb0e to your computer and use it in GitHub Desktop.
Save kioqq/0e7c053a524aef1ad77be4b49425fb0e to your computer and use it in GitHub Desktop.
k8s cluster config
nodes:
- address: 207.154.236.35
internal_address: 10.135.122.165
user: root
ssh_key_path: ~/.ssh/id_rsa
role:
- controlplane
- etcd
- worker
# If set to true, RKE will not fail when unsupported Docker version are found
ignore_docker_version: true
# Enable use of SSH agent to use SSH private keys with passphrase
# This requires the environment `SSH_AUTH_SOCK` configured pointing to your SSH agent which has the private key added
ssh_agent_auth: true
# List of registry credentials
# If you are using a Docker Hub registry, you can omit the `url` or set it to `docker.io`
private_registries:
- url: registry.gl.clsh.tv
user: kio
password: Terrakivra1337
# Set the name of the Kubernetes cluster
cluster_name: clashtv.cluster
# The kubernetes version used. For now, this should match the version defined in rancher/types defaults map: https://github.com/rancher/types/blob/master/apis/management.cattle.io/v3/k8s_defaults.go#L14
# In case the kubernetes_version and kubernetes image in system_images are defined, the system_images configuration will take precedence over kubernetes_version.
kubernetes_version: v1.12.1-rancher1-1
# Currently, only authentication strategy supported is x509.
# You can optionally create additional SANs (hostnames or IPs) to add to
# the API server PKI certificate.
# This is useful if you want to use a load balancer for the control plane servers.
# Kubernetes Authorization mode
# Use `mode: rbac` to enable RBAC
# Use `mode: none` to disable authorization
authorization:
mode: rbac
# Add-ons are deployed using kubernetes jobs. RKE will give up on trying to get the job status after this timeout in seconds..
addon_job_timeout: 30
# There are several network plug-ins that work, but we default to canal
network:
plugin: canal
# Currently only nginx ingress provider is supported.
# To disable ingress controller, set `provider: none`
ingress:
provider: nginx
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment