8bc8c7c028
This introduces a new document called `EncryptionPolicy` to configure this behavior. It currently only supports using symmetric encryption with `GPG`, but that should be available on all Ubuntu systems (which is what we currently support) and should also be fairly reliable. Change-Id: I06d4faa119b736773df0d8cbf0e7a23fd98edcdf Depends-On: https://review.openstack.org/#/c/602175/
44 lines
901 B
YAML
44 lines
901 B
YAML
---
|
|
schema: promenade/KubernetesNetwork/v1
|
|
metadata:
|
|
schema: metadata/Document/v1
|
|
name: kubernetes-network
|
|
layeringDefinition:
|
|
abstract: false
|
|
layer: site
|
|
storagePolicy: cleartext
|
|
data:
|
|
dns:
|
|
cluster_domain: cluster.local
|
|
service_ip: 10.96.0.10
|
|
bootstrap_validation_checks:
|
|
- calico-etcd.kube-system.svc.cluster.local
|
|
- google.com
|
|
- kubernetes-etcd.kube-system.svc.cluster.local
|
|
- kubernetes.default.svc.cluster.local
|
|
upstream_servers:
|
|
- 8.8.8.8
|
|
- 8.8.4.4
|
|
|
|
kubernetes:
|
|
apiserver_port: 6443
|
|
haproxy_port: 6553
|
|
pod_cidr: 10.97.0.0/16
|
|
service_cidr: 10.96.0.0/16
|
|
service_ip: 10.96.0.1
|
|
|
|
etcd:
|
|
container_port: 2379
|
|
haproxy_port: 2378
|
|
|
|
hosts_entries:
|
|
- ip: 192.168.77.1
|
|
names:
|
|
- registry
|
|
|
|
# proxy:
|
|
# url: http://proxy.example.com:8080
|
|
# additional_no_proxy:
|
|
# - 10.0.1.1
|
|
...
|