alexandre.pires
01bf71f8d2
- Introduced a new Cloudns issuer configuration for cert-manager. - Created separate tasks for DNS-01 and HTTP-01 challenge issuers. - Updated cert-manager tasks to include Cloudns provider and manage secrets. - Refactored existing LetsEncrypt issuer registration to use new task structure. - Added necessary Kubernetes resources for Cloudns integration, including RBAC and certificates. - Updated Terraform configurations to support new DNS records and service changes. - Adjusted deployment strategies for CoreDNS and Open WebUI applications.
48 lines
1.4 KiB
YAML
48 lines
1.4 KiB
YAML
microk8s_k8s_version: "1.29"
|
|
microk8s_kubectl_version: "1.29.0"
|
|
|
|
# load balancer configuration
|
|
microk8s_lb_provider: "metallb"
|
|
microk8s_lb_ips: "10.2.0.40-10.2.0.49"
|
|
microk8s_lb_http_port: 80
|
|
microk8s_lb_https_port: 443
|
|
microk8s_metallb_version: 0.14.9
|
|
|
|
# certificate manager
|
|
microk8s_certmgr_letsencrypt_issuer_email: webmaster@localhost.localdomain
|
|
microk8s_certmgr_version: 1.14.5
|
|
microk8s_certmgr_letsencrypt_http01: true
|
|
microk8s_certmgr_letsencrypt_dns01: false
|
|
microk8s_certmgr_letsencrypt_dns01_provider: "cloudns"
|
|
microk8s_cloudns_auth_id:
|
|
microk8s_cloudns_auth_password:
|
|
|
|
# microk8s specific
|
|
microk8s_channel: "{{ microk8s_k8s_version }}/stable"
|
|
microk8s_privileged: true
|
|
microk8s_alt_names: "localhost.localdomain"
|
|
microk8s_status_timeout: 300
|
|
|
|
microk8s_users: []
|
|
|
|
microk8s_host_public_ip: "{{ ansible_default_ipv4.address }}"
|
|
|
|
microk8s_net_devices:
|
|
- "cni+"
|
|
- "flannel+"
|
|
|
|
microk8s_incoming_traffic:
|
|
- { rule: "allow", port: "16443", proto: "tcp", from: "10.1.0.0/16" }
|
|
- { rule: "allow", port: "10254", proto: "tcp", from: "10.1.0.0/16" }
|
|
- { rule: "allow", port: "10254", proto: "tcp", from: "{{ microk8s_host_public_ip }}" }
|
|
|
|
microk8s_outgoing_traffic: []
|
|
|
|
microk8s_allowed_hosts: []
|
|
|
|
microk8s_iac_user: "provision"
|
|
|
|
microk8s_encryption_secret: "UGIzZ0w5UENaOVp2YkttWDdDNlNtaDdNYUJVd0ttUTY="
|
|
microk8s_encryption_cfg: "/etc/microk8s_encryption.yaml"
|
|
microk8s_encryption_kms_socket: ""
|