mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 19:04:31 +00:00
e228dd9243
- Installer: Updated k3s deployment logic and configuration generation. - k3s Role: Implemented token drift protection to verify Vault secrets against live node tokens. - DNS: Enhanced samba_reverse_dns role to support multiple reverse zones. - Service Init: Updated initialization scripts and status reporting. - Infrastructure: Added prole management role and k3s diagnostic playbook. - Configuration: Updated prole.cfg and added vaulted group variables.
31 lines
745 B
YAML
31 lines
745 B
YAML
---
|
|
k3s_enabled: true
|
|
k3s_state: present
|
|
k3s_version: ""
|
|
k3s_guard_token_drift: true
|
|
|
|
k3s_role: agent
|
|
k3s_cluster_init: false
|
|
k3s_server_url: ""
|
|
k3s_token: "{{ vault_k3s_token | default('') }}"
|
|
k3s_disable: []
|
|
k3s_tls_sans: []
|
|
k3s_node_labels: []
|
|
k3s_node_taints: []
|
|
k3s_disable_agent: false
|
|
|
|
k3s_write_kubeconfig_mode: "0640"
|
|
k3s_kubeconfig_group: kubeadm
|
|
k3s_kubeconfig_users: []
|
|
|
|
prole_home: /home/chrisfu/dev/prole
|
|
prole_conf: "{{ prole_home }}/conf"
|
|
prole_port_forward_kubeconfig: /etc/rancher/k3s/prole-kubeconfig.yaml
|
|
prole_port_forward_service_name: prole-port-forwards
|
|
|
|
k3s_registry_config_enabled: true
|
|
k3s_registry_config_path: /etc/rancher/k3s/registries.yaml
|
|
k3s_registry_host: ""
|
|
k3s_registry_namespace: ""
|
|
k3s_registry_port: 5000
|