mirror of
https://github.com/techno-tim/k3s-ansible.git
synced 2026-10-23 20:22:03 +02:00
Timothy Stewart
ab3de49697
- Bump K3s to v1.36.2+k3s1, Calico to v3.32.1, Cilium to v1.20.0, kube-vip to v1.2.2, kube-vip cloud provider to v0.0.12, and MetalLB to v0.16.0 across sample inventory, role defaults, and argument specs - Pin the Cilium CLI with a new cilium_cli_tag (v0.19.7) instead of the floating stable.txt lookup - Replace the CiliumBGPPeeringPolicy v2alpha1 BGP template with the v2 CiliumBGPClusterConfig, CiliumBGPPeerConfig, CiliumBGPAdvertisement, and CiliumLoadBalancerIPPool resource set - Move Cilium load balancer Helm keys from bpf.loadBalancer to the valid top-level loadBalancer path - Add preflight schema validation and remove the deprecated policy after the v2 objects are accepted - Wait for cilium status after installation - Pin kube-vip RBAC in a repository template instead of fetching a mutable URL, and include EndpointSlice permissions - Fix the kube-vip bgppeers format to address:ASN comma-separated peers - Fail clearly when the MetalLB speaker tag replacement does not apply - Drop the obsolete MetalLB webhook service name version branch
136 lines
3.7 KiB
YAML
136 lines
3.7 KiB
YAML
---
|
|
argument_specs:
|
|
main:
|
|
short_description: Setup k3s servers
|
|
options:
|
|
apiserver_endpoint:
|
|
description: Virtual ip-address configured on each master
|
|
required: true
|
|
|
|
cilium_bgp:
|
|
description:
|
|
- Enable cilium BGP control plane for LB services and pod cidrs.
|
|
- Disables the use of MetalLB.
|
|
type: bool
|
|
default: ~
|
|
|
|
cilium_iface:
|
|
description: The network interface used for when Cilium is enabled
|
|
default: ~
|
|
|
|
extra_server_args:
|
|
description: Extra arguments for server nodes
|
|
default: ""
|
|
|
|
group_name_master:
|
|
description: Name of the master group
|
|
default: master
|
|
|
|
k3s_create_kubectl_symlink:
|
|
description: Create the kubectl -> k3s symlink
|
|
default: false
|
|
type: bool
|
|
|
|
k3s_create_crictl_symlink:
|
|
description: Create the crictl -> k3s symlink
|
|
default: false
|
|
type: bool
|
|
|
|
kube_vip_arp:
|
|
description: Enables kube-vip ARP broadcasts
|
|
default: true
|
|
type: bool
|
|
|
|
kube_vip_bgp:
|
|
description: Enables kube-vip BGP peering
|
|
default: false
|
|
type: bool
|
|
|
|
kube_vip_bgp_routerid:
|
|
description: Defines the router ID for the kube-vip BGP server
|
|
default: "127.0.0.1"
|
|
|
|
kube_vip_bgp_as:
|
|
description: Defines the AS for the kube-vip BGP server
|
|
default: "64513"
|
|
|
|
kube_vip_bgp_peeraddress:
|
|
description: Defines the address for the kube-vip BGP peer
|
|
default: "192.168.30.1"
|
|
|
|
kube_vip_bgp_peeras:
|
|
description: Defines the AS for the kube-vip BGP peer
|
|
default: "64512"
|
|
|
|
kube_vip_bgp_peers:
|
|
description: List of BGP peer ASN & address pairs
|
|
default: []
|
|
|
|
kube_vip_bgp_peers_groups:
|
|
description: Inventory group in which to search for additional kube_vip_bgp_peers parameters to merge.
|
|
default: ['k3s_master']
|
|
|
|
kube_vip_iface:
|
|
description:
|
|
- Explicitly define an interface that ALL control nodes
|
|
- should use to propagate the VIP, define it here.
|
|
- Otherwise, kube-vip will determine the right interface
|
|
- automatically at runtime.
|
|
default: ~
|
|
|
|
kube_vip_tag_version:
|
|
description: Image tag for kube-vip
|
|
default: v1.2.2
|
|
|
|
kube_vip_cloud_provider_tag_version:
|
|
description: Tag for kube-vip-cloud-provider manifest when enabled
|
|
default: v0.0.12
|
|
|
|
kube_vip_lb_ip_range:
|
|
description: IP range for kube-vip load balancer
|
|
default: ~
|
|
|
|
metal_lb_controller_tag_version:
|
|
description: Image tag for MetalLB
|
|
default: v0.16.0
|
|
|
|
metal_lb_speaker_tag_version:
|
|
description: Image tag for MetalLB
|
|
default: v0.16.0
|
|
|
|
metal_lb_type:
|
|
choices:
|
|
- frr
|
|
- native
|
|
default: native
|
|
description: Use FRR mode or native. Valid values are `frr` and `native`
|
|
|
|
proxy_env:
|
|
type: dict
|
|
description:
|
|
- Internet proxy configurations.
|
|
- See https://docs.k3s.io/advanced#configuring-an-http-proxy for details
|
|
default: ~
|
|
options:
|
|
HTTP_PROXY:
|
|
description: HTTP internet proxy
|
|
required: true
|
|
HTTPS_PROXY:
|
|
description: HTTPS internet proxy
|
|
required: true
|
|
NO_PROXY:
|
|
description: Addresses that will not use the proxies
|
|
required: true
|
|
|
|
retry_count:
|
|
description: Amount of retries when verifying that nodes joined
|
|
type: int
|
|
default: 20
|
|
|
|
server_init_args:
|
|
description: Arguments for server nodes
|
|
|
|
systemd_dir:
|
|
description: Path to systemd services
|
|
default: /etc/systemd/system
|