prole/infrastructure/roles/k3s/defaults/main.yml
chrisfu 60820b2b7c Checkpoint: ArgoCD IO load distribution and K3s configuration updates
ArgoCD IO load distribution: Updated k8s/argocd/install.yaml to use hostPath volumes for application-controller (/prole/d001), redis (/prole/d002), and repo-server (/prole/d003). Updated Ansible configure task to create hostPath directories on myrddin.prole.org.

K3s configuration and testing: Added test playbooks for kubeconfig rewriting and argument validation. Updated K3s install, configure, and image import tasks. Configured required mounts and host-specific variables for myrddin.prole.org.

Miscellaneous: Updated conf/prole.cfg with K3S_TOKEN. Bumped prole-db version and updated recovery manifest templates. Minor UI adjustments in cluster screen.
Co-authored-by: Junie <junie@jetbrains.com>
2026-03-04 12:23:15 -08:00

53 lines
1.5 KiB
YAML

---
k3s_enabled: true
k3s_state: present
k3s_version: ""
k3s_guard_token_drift: true
# CloudNative-PG
# Pin operator/plugin version by default to avoid unanticipated upgrades and load spikes.
# Upgrades must be explicitly enabled via `k3s_cnpg_upgrade: true`.
k3s_cnpg_version_default: "1.28.1"
k3s_cnpg_upgrade: false
k3s_role: agent
k3s_cluster_init: false
k3s_server_url: ""
k3s_token: "{{ vault_k3s_token | default('') }}"
k3s_disable: []
k3s_tls_sans: []
k3s_node_labels: []
k3s_node_taints: []
k3s_disable_agent: false
k3s_write_kubeconfig_mode: "0640"
k3s_kubeconfig_group: kubeadm
k3s_kubeconfig_users: []
k3s_registry_config_enabled: true
k3s_registry_config_path: /etc/rancher/k3s/registries.yaml
k3s_registry_host: ""
k3s_registry_namespace: ""
k3s_registry_port: 5000
# Pulling large images on every run can cause major load spikes; keep this opt-in.
k3s_prestage_images: false
k3s_prestage_images_platform: "linux/arm64"
k3s_prestage_images_list:
- docker.io/library/registry:2
- docker.io/prom/prometheus:v2.55.1
- docker.io/prom/alertmanager:v0.27.0
- quay.io/prometheus/node-exporter:v1.8.2
- quay.io/prometheus-operator/prometheus-operator:v0.71.2
- ghcr.io/openbao/openbao:2.0.0
- ghcr.io/opentofu/opentofu:1.8.2
- docker.io/library/kong:3.8
k3s_cert_manager_version: "v1.14.6"
k3s_svc_check_domain: "svc.prole.org"
k3s_svc_check_namespace: "svc-check"
k3s_svc_check_kong_namespace: "${SERVICE_NAMESPACE}"
k3s_svc_check_kong_configmap_name: "prole-svc-kong-config"
k3s_kong_namespace: "${SERVICE_NAMESPACE}"
k3s_kong_deployment: "prole-svc-kong"