Dustin C. Hatch
c7374c8cca
The _haproxy_ role only installs HAProxy and provides some basic global configuration; it expects another role to depend on it and provide concrete proxy configuration with drop-in configuration files. Thus, we need a role specifically for the Kubernetes control plane nodes to provide the configuration to proxy for the API server.
33 lines
687 B
YAML
33 lines
687 B
YAML
collectd_processes: '{{ collectd_processes_kubelet + collectd_processes_controller}}'
|
|
dnf_automatic_reboot: never
|
|
|
|
keepalived_global_defs: |-
|
|
max_auto_priority 79
|
|
|
|
vrrp_track_process:
|
|
kube-apiserver: |-
|
|
process kube-apiserver
|
|
weight 90
|
|
|
|
vrrp_instance:
|
|
kube-apiserver: |-
|
|
state BACKUP
|
|
priority ${_RANDOM 1 100}
|
|
interface {{ ansible_default_ipv4.interface }}
|
|
virtual_router_id 49
|
|
virtual_ipaddress {
|
|
172.30.0.169/27
|
|
}
|
|
track_process {
|
|
kube-apiserver
|
|
}
|
|
|
|
kube_root_ca_pem: >-
|
|
{{ lookup(
|
|
"kubernetes.core.k8s",
|
|
kind="ConfigMap",
|
|
namespace="kube-public",
|
|
resource_name="kube-root-ca.crt"
|
|
).data["ca.crt"]
|
|
}}
|