mirror of
https://github.com/techno-tim/k3s-ansible.git
synced 2026-10-23 20:22:03 +02:00
Timothy Stewart
ab3de49697
- Bump K3s to v1.36.2+k3s1, Calico to v3.32.1, Cilium to v1.20.0, kube-vip to v1.2.2, kube-vip cloud provider to v0.0.12, and MetalLB to v0.16.0 across sample inventory, role defaults, and argument specs - Pin the Cilium CLI with a new cilium_cli_tag (v0.19.7) instead of the floating stable.txt lookup - Replace the CiliumBGPPeeringPolicy v2alpha1 BGP template with the v2 CiliumBGPClusterConfig, CiliumBGPPeerConfig, CiliumBGPAdvertisement, and CiliumLoadBalancerIPPool resource set - Move Cilium load balancer Helm keys from bpf.loadBalancer to the valid top-level loadBalancer path - Add preflight schema validation and remove the deprecated policy after the v2 objects are accepted - Wait for cilium status after installation - Pin kube-vip RBAC in a repository template instead of fetching a mutable URL, and include EndpointSlice permissions - Fix the kube-vip bgppeers format to address:ASN comma-separated peers - Fail clearly when the MetalLB speaker tag replacement does not apply - Drop the obsolete MetalLB webhook service name version branch
35 lines
852 B
YAML
35 lines
852 B
YAML
---
|
|
k3s_kubectl_binary: k3s kubectl
|
|
|
|
bpf_lb_algorithm: maglev
|
|
bpf_lb_mode: hybrid
|
|
|
|
calico_blockSize: 26 # noqa var-naming
|
|
calico_ebpf: false
|
|
calico_encapsulation: VXLANCrossSubnet
|
|
calico_natOutgoing: Enabled # noqa var-naming
|
|
calico_nodeSelector: all() # noqa var-naming
|
|
calico_tag: v3.32.1
|
|
|
|
cilium_bgp: false
|
|
cilium_exportPodCIDR: true # noqa var-naming
|
|
cilium_bgp_my_asn: 64513
|
|
cilium_bgp_peer_asn: 64512
|
|
cilium_bgp_neighbors: []
|
|
cilium_bgp_neighbors_groups: ['k3s_all']
|
|
cilium_bgp_lb_cidr: 192.168.31.0/24
|
|
cilium_hubble: true
|
|
cilium_mode: native
|
|
cilium_tag: v1.20.0
|
|
cilium_cli_tag: v0.19.7
|
|
|
|
cluster_cidr: 10.52.0.0/16
|
|
enable_bpf_masquerade: true
|
|
kube_proxy_replacement: true
|
|
group_name_master: master
|
|
|
|
metal_lb_mode: layer2
|
|
metal_lb_available_timeout: 240s
|
|
metal_lb_controller_tag_version: v0.16.0
|
|
metal_lb_ip_range: 192.168.30.80-192.168.30.90
|