mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 15:54:32 +00:00
56806984bc
- k3s_sync: choose any server as sync source fallback; refresh kubeconfig and validate nodes\n- fetch_kubeconfig: save to prole-k3s.kubeconfig and etc/secrets/k3s.kubeconfig\n- k3s sync: sync server URL into config.yaml; restore TLS bundle only on servers\n- cert-manager/ACME: wait for CNI/webhook readiness; retry ClusterIssuer/Certificate apply\n- inventory: tune myrddin control-plane timing args; add render test\n- misc: update port mappings and prole-db manifests/version Co-authored-by: Junie <junie@jetbrains.com>
119 lines
3.5 KiB
YAML
119 lines
3.5 KiB
YAML
iscsi_portal: 10.0.0.203
|
|
|
|
iscsi_targets:
|
|
# PROLE-DB-1
|
|
- iqn: "iqn.2000-01.com.synology:synology.Target-11.292d45194a1"
|
|
chap_user: "prole"
|
|
chap_password: "{{ vault_iscsi_prole_password }}"
|
|
mounts:
|
|
- path: /prole/d001
|
|
fstype: xfs
|
|
opts: "_netdev,noatime"
|
|
src: "UUID=c07dc0f2-cf60-4da5-b68e-ea45e86d473e"
|
|
|
|
# PROLE-DB-2
|
|
- iqn: "iqn.2000-01.com.synology:synology.Target-12.292d45194a1"
|
|
chap_user: "prole"
|
|
chap_password: "{{ vault_iscsi_prole_password }}"
|
|
mounts:
|
|
- path: /prole/d002
|
|
fstype: xfs
|
|
opts: "_netdev,noatime"
|
|
src: "UUID=fe087fb0-a321-4767-b838-b4385e81693e"
|
|
|
|
# PROLE-DB-3
|
|
- iqn: "iqn.2000-01.com.synology:synology.Target-13.292d45194a1"
|
|
chap_user: "prole"
|
|
chap_password: "{{ vault_iscsi_prole_password }}"
|
|
mounts:
|
|
- path: /prole/d003
|
|
fstype: xfs
|
|
opts: "_netdev,noatime"
|
|
src: "UUID=757f1ee4-dc23-414b-b595-e3058c0744f0"
|
|
|
|
# PROLE-HOME
|
|
- iqn: "iqn.2000-01.com.synology:synology.Target-17.292d45194a1"
|
|
chap_user: "prole"
|
|
chap_password: "{{ vault_iscsi_prole_password }}"
|
|
mounts:
|
|
- path: /prole/home
|
|
fstype: ext4
|
|
opts: "_netdev,noatime"
|
|
src: "UUID=607718c8-467a-474f-8e36-80ceafe1beb4"
|
|
|
|
# PROLE-LOGS
|
|
- iqn: "iqn.2000-01.com.synology:synology.Target-1.292d45194a1"
|
|
chap_user: "prole"
|
|
chap_password: "{{ vault_iscsi_prole_password }}"
|
|
mounts:
|
|
- path: /prole/logs
|
|
fstype: ext4
|
|
opts: "_netdev,noatime"
|
|
src: "UUID=5335affd-b1ab-4134-a1c0-be88ab965309"
|
|
|
|
# PROLE-K3S
|
|
- iqn: "iqn.2000-01.com.synology:synology.Target-15.292d45194a1"
|
|
chap_user: "prole"
|
|
chap_password: "{{ vault_iscsi_prole_password }}"
|
|
mounts:
|
|
- path: /var/lib/rancher
|
|
fstype: ext4
|
|
opts: "_netdev,noatime"
|
|
src: "UUID=c8320979-d3eb-4b40-93e0-ee452a4b9780"
|
|
|
|
iscsi_absent_mounts:
|
|
- /opt/prole/logs/chrisfu
|
|
|
|
ad_dc_enabled: true
|
|
|
|
k3s_enabled: true
|
|
k3s_cluster_init: false
|
|
k3s_role: server
|
|
k3s_token: "{{ vault_k3s_token | default('') }}" # store this in vault
|
|
k3s_datastore_mariadb_host: 10.0.0.6
|
|
k3s_datastore_mariadb_port: 3306
|
|
k3s_datastore_mariadb_db: k3s
|
|
k3s_datastore_mariadb_user: prole_k3s
|
|
# Password is the same as the Samba administrator password and must remain in Ansible Vault.
|
|
k3s_datastore_mariadb_password: "{{ vault_samba_dns_admin_pass }}"
|
|
k3s_datastore_endpoint: "mysql://{{ k3s_datastore_mariadb_user }}:{{ k3s_datastore_mariadb_password | urlencode }}@tcp({{ k3s_datastore_mariadb_host }}:{{ k3s_datastore_mariadb_port }})/{{ k3s_datastore_mariadb_db }}"
|
|
k3s_tls_sans:
|
|
- myrddin.prole.org
|
|
k3s_service_node_labels:
|
|
- "prole.org/role=control"
|
|
|
|
# More forgiving IO/etcd timeouts to reduce error-correction churn on slow storage
|
|
k3s_kube_apiserver_args:
|
|
- "request-timeout=60s"
|
|
- "min-request-timeout=60"
|
|
|
|
k3s_kube_controller_manager_args:
|
|
- "leader-elect-lease-duration=600s"
|
|
- "leader-elect-renew-deadline=420s"
|
|
- "leader-elect-retry-period=60s"
|
|
- "node-monitor-grace-period=10m"
|
|
- "node-startup-grace-period=10m"
|
|
|
|
k3s_kube_scheduler_args:
|
|
- "leader-elect-lease-duration=600s"
|
|
- "leader-elect-renew-deadline=420s"
|
|
- "leader-elect-retry-period=60s"
|
|
|
|
k3s_cloud_controller_manager_args:
|
|
- "leader-elect-lease-duration=900s"
|
|
- "leader-elect-renew-deadline=600s"
|
|
- "leader-elect-retry-period=90s"
|
|
|
|
k3s_kubelet_args:
|
|
- "housekeeping-interval=30s"
|
|
|
|
k3s_write_kubeconfig_mode: "0640"
|
|
k3s_kubeconfig_group: kubeadm
|
|
k3s_kubeconfig_users:
|
|
- pi
|
|
|
|
k3s_required_mounts:
|
|
- /prole/d001
|
|
- /prole/d002
|
|
- /prole/d003
|