config/configs/node-bootstrap.yaml
2023-05-15 16:40:08 +02:00

100 lines
1.9 KiB
YAML
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

---
# early system configuration
anti_phishing_code: "Direktil<3"
modules: /modules.sqfs
auths:
{{ .vars.bootstrap_auths |yaml }}
networks:
- name: loopback
interfaces: [ { var: iface, n: 1, regexps: [ "^lo$" ] } ]
script: |
ip a add 127.0.0.1/8 dev lo
ip a add ::1/128 dev lo
ip li set lo up
{{- if .vars.net_custom }}
{{ .vars.net_custom | indent " " }}
{{- else }}
ip link add name main type bond
ip addr add {{.host.ip}}/{{.vars.netmask}} dev main
ip link set main up
{{- if .vars.gateway_mask }}
ip route add {{.vars.gateway}}/{{.vars.gateway_mask}} dev main
{{- end }}
ip route add default via {{.vars.gateway}}
cat >>/etc/resolv.conf <<EOF
{{- range .vars.dns }}
nameserver {{.}}
{{- end }}
EOF
- name: main
interfaces:
- var: ifaces
n: -1 # grab all matches
regexps:
- {{ .vars.iface }}
script: |
for iface in $ifaces
do
ip link set $iface master main
ip li set $iface up
done
{{- end }}
lvm:
- vg: storage
pvs:
n: 1
regexps:
- {{ .vars.devname_match }}
defaults:
fs: ext4
lvs:
- name: bootstrap
size: 2g
- name: varlog
extents: 10%VG
{{ if .vars.is_master }}
- name: etcd
extents: 10%VG
{{ end }}
- name: kubelet
extents: 5%VG
- name: containerd
extents: {{ .vars.containerd_size }}
crypt:
{{- if .vars.encrypt_disks }}
- dev: /dev/storage/bootstrap
- dev: /dev/storage/varlog
- dev: /dev/storage/kubelet
- dev: /dev/storage/containerd
{{- if .vars.is_master }}
- dev: /dev/storage/etcd
{{- end }}
{{- end }}
- prefix: /dev/storage/k8s-crypt-
name: k8s-pv-crypt-
bootstrap:
{{- if .vars.encrypt_disks }}
dev: /dev/mapper/bootstrap
{{- else }}
dev: /dev/storage/bootstrap
{{- end }}
{{ if .vars.dls_base_url }}
seed: {{ .vars.dls_base_url }}/hosts-by-token/{{ host_download_token }}/bootstrap.tar
{{ end }}