ca770736ed
This commit enables basic support for IPv6 pod and service subnet. Also two gates are added - an OVS and OVN one, both as non-voting at the moment. The DevStack changes are mostly about putting correct --ethertype on SGs, using ip6tables and IPv6 subnetpool. The Kuryr change required putting IPv6 address of K8s API in brackets. Please note that this unblocks just the most basic use case, network policy support will still not work with IPv6. Depends-On: https://review.opendev.org/#/c/707103/ Implements: blueprint kuryr-ipv6-support Change-Id: Id56b622a5038d8e5c072aa00a9f38a2418e6268f
107 lines
4.7 KiB
Plaintext
107 lines
4.7 KiB
Plaintext
KURYR_HOME=${KURYR_HOME:-$DEST/kuryr-kubernetes}
|
|
CNI_BIN_DIR=${CNI_BIN_DIR:-$DEST/cni/bin}
|
|
CNI_CONF_DIR=${CNI_CONF_DIR:-$DEST/cni/conf}
|
|
|
|
KURYR_CONFIG_DIR=${KURYR_CONFIG_DIR:-/etc/kuryr}
|
|
KURYR_CONFIG=${KURYR_CONFIG:-${KURYR_CONFIG_DIR}/kuryr.conf}
|
|
KURYR_AUTH_CACHE_DIR=${KURYR_AUTH_CACHE_DIR:-/var/cache/kuryr}
|
|
KURYR_LOCK_DIR=${KURYR_LOCK_DIR:-${DATA_DIR}/kuryr-kubernetes}
|
|
KURYR_WAIT_TIMEOUT=${KURYR_WAIT_TIMEOUT:-300}
|
|
|
|
KURYR_DOCKER_ENGINE_SOCKET_FILE=${KURYR_DOCKER_ENGINE_SOCKET_FILE:-/var/run/docker.sock}
|
|
|
|
# Neutron defaults
|
|
KURYR_CONFIGURE_NEUTRON_DEFAULTS=${KURYR_CONFIGURE_NEUTRON_DEFAULTS:-True}
|
|
KURYR_NEUTRON_DEFAULT_PROJECT=${KURYR_NEUTRON_DEFAULT_PROJECT:-k8s}
|
|
KURYR_NEUTRON_DEFAULT_POD_NET=${KURYR_NEUTRON_DEFAULT_POD_SUBNET:-k8s-pod-net}
|
|
KURYR_NEUTRON_DEFAULT_SERVICE_NET=${KURYR_NEUTRON_DEFAULT_SERVICE_SUBNET:-k8s-service-net}
|
|
KURYR_NEUTRON_DEFAULT_POD_SUBNET=${KURYR_NEUTRON_DEFAULT_POD_SUBNET:-k8s-pod-subnet}
|
|
KURYR_NEUTRON_DEFAULT_SERVICE_SUBNET=${KURYR_NEUTRON_DEFAULT_SERVICE_SUBNET:-k8s-service-subnet}
|
|
KURYR_NEUTRON_DEFAULT_SUBNETPOOL_ID=${KURYR_NEUTRON_DEFAULT_SUBNETPOOL_ID:-}
|
|
KURYR_NEUTRON_DEFAULT_ROUTER=${KURYR_NEUTRON_DEFAULT_ROUTER:-}
|
|
KURYR_NEUTRON_DEFAULT_EXT_SVC_NET=${KURYR_NEUTRON_DEFAULT_EXT_SVC_NET:-public}
|
|
KURYR_NEUTRON_DEFAULT_EXT_SVC_SUBNET=${KURYR_NEUTRON_DEFAULT_EXT_SVC_SUBNET:-public-subnet}
|
|
|
|
# Etcd
|
|
ETCD_PORT=${ETCD_PORT:-2379}
|
|
|
|
# HYPERKUBE
|
|
KURYR_HYPERKUBE_IMAGE=${KURYR_HYPERKUBE_IMAGE:-gcr.io/google_containers/hyperkube-amd64}
|
|
# Tested with 1.8.15, 1.9.10, 1.10.8, 1.11.3, 1.12.2 and 1.13.0
|
|
KURYR_HYPERKUBE_VERSION=${KURYR_HYPERKUBE_VERSION:-v1.16.0}
|
|
KURYR_HYPERKUBE_DATA_DIR=${KURYR_HYPERKUBE_DATA_DIR:-${DATA_DIR}/hyperkube}
|
|
KURYR_HYPERKUBE_BINARY=${KURYR_HYPERKUBE_BINARY:-/usr/local/bin/hyperkube}
|
|
|
|
# Kubernetes
|
|
KURYR_K8S_API_PORT=${KURYR_K8S_API_PORT:-8080}
|
|
# NOTE(dulek): [kubernetes]api_root option will use LB IP instead.
|
|
KURYR_K8S_API_URL=${KURYR_K8S_API_URL:-"http://${SERVICE_HOST}:${KURYR_K8S_API_PORT}"}
|
|
KURYR_K8S_API_CERT=${KURYR_K8S_API_CERT:-"${KURYR_HYPERKUBE_DATA_DIR}/kuryr.crt"}
|
|
KURYR_K8S_API_KEY=${KURYR_K8S_API_KEY:-"${KURYR_HYPERKUBE_DATA_DIR}/kuryr.key"}
|
|
KURYR_K8S_API_CACERT=${KURYR_K8S_API_CACERT:-}
|
|
KURYR_K8S_API_LB_PORT=${KURYR_K8S_API_LB_PORT:-443}
|
|
KURYR_PORT_DEBUG=${KURYR_PORT_DEBUG:-True}
|
|
KURYR_SUBNET_DRIVER=${KURYR_SUBNET_DRIVER:-default}
|
|
KURYR_SG_DRIVER=${KURYR_SG_DRIVER:-default}
|
|
KURYR_ENABLED_HANDLERS=${KURYR_ENABLED_HANDLERS:-vif,lb,lbaasspec}
|
|
|
|
# OpenShift
|
|
OPENSHIFT_BINARY_VERSION=${OPENSHIFT_BINARY_VERSION:-v3.11.0}
|
|
OPENSHIFT_BINARY_BASE_URL=${OPENSHIFT_BINARY_BASE_URL:-https://github.com/openshift/origin/releases/download}
|
|
OPENSHIFT_DATA_DIR=${OPENSHIFT_DATA_DIR:-${DATA_DIR}/openshift}
|
|
OPENSHIFT_BIN=${OPENSHIFT_BIN:-${OPENSHIFT_DATA_DIR}/bin}
|
|
OPENSHIFT_API_PORT=${OPENSHIFT_API_PORT:-8443}
|
|
OPENSHIFT_API_URL=${OPENSHIFT_API_URL:-https://${HOST_IP}:${OPENSHIFT_API_PORT}}
|
|
OPENSHIFT_CNI_BINARY_URL=${OPENSHIFT_CNI_BINARY_URL:-https://github.com/containernetworking/cni/releases/download/v0.5.2/cni-v0.5.2.tgz}
|
|
|
|
# Octavia
|
|
KURYR_K8S_OCTAVIA_MEMBER_MODE=${KURYR_K8S_OCTAVIA_MEMBER_MODE:-L3}
|
|
KURYR_K8S_OCTAVIA_SG_MODE=${KURYR_K8S_OCTAVIA_SG_MODE:-update}
|
|
KURYR_ENFORCE_SG_RULES=${KURYR_ENFORCE_SG_RULES:-True}
|
|
KURYR_LB_ALGORITHM=${KURYR_LB_ALGORITHM:-ROUND_ROBIN}
|
|
|
|
# Kuryr_ovs_baremetal
|
|
KURYR_CONFIGURE_BAREMETAL_KUBELET_IFACE=${KURYR_CONFIGURE_BAREMETAL_KUBELET_IFACE:-True}
|
|
|
|
# Kubernetes containerized deployment
|
|
KURYR_K8S_CONTAINERIZED_DEPLOYMENT=${KURYR_K8S_CONTAINERIZED_DEPLOYMENT:-False}
|
|
|
|
# Kuryr Endpoint LBaaS OCTAVIA provider
|
|
KURYR_EP_DRIVER_OCTAVIA_PROVIDER=${KURYR_EP_DRIVER_OCTAVIA_PROVIDER:-default}
|
|
|
|
# Kuryr VIF driver
|
|
KURYR_POD_VIF_DRIVER=${KURYR_POD_VIF_DRIVER:-neutron-vif}
|
|
|
|
# Kuryr Pool Driver
|
|
KURYR_USE_PORTS_POOLS=${KURYR_USE_PORTS_POOLS:-False}
|
|
KURYR_VIF_POOL_DRIVER=${KURYR_VIF_POOL_DRIVER:-noop}
|
|
KURYR_VIF_POOL_MIN=${KURYR_VIF_POOL_MIN:-2}
|
|
KURYR_VIF_POOL_MAX=${KURYR_VIF_POOL_MAX:-0}
|
|
KURYR_VIF_POOL_BATCH=${KURYR_VIF_POOL_BATCH:-5}
|
|
KURYR_VIF_POOL_UPDATE_FREQ=${KURYR_VIF_POOL_UPDATE_FREQ:-30}
|
|
|
|
# Kuryr VIF Pool Manager
|
|
KURYR_VIF_POOL_MANAGER=${KURYR_VIF_POOL_MANAGER:-False}
|
|
|
|
# Health Server
|
|
KURYR_HEALTH_SERVER_PORT=${KURYR_HEALTH_SERVER_PORT:-8082}
|
|
|
|
# OVS HOST PATH
|
|
VAR_RUN_PATH=${VAR_RUN_PATH:-/var/run}
|
|
|
|
# Health Server
|
|
KURYR_CNI_HEALTH_SERVER_PORT=${KURYR_CNI_HEALTH_SERVER_PORT:-8090}
|
|
|
|
# High availability of controller
|
|
KURYR_CONTROLLER_HA_PORT=${KURYR_CONTROLLER_HA_PORT:-16401}
|
|
KURYR_CONTROLLER_REPLICAS=${KURYR_CONTROLLER_REPLICAS:-1}
|
|
KURYR_FORCE_IMAGE_BUILD=${KURYR_FORCE_IMAGE_BUILD:-False}
|
|
|
|
# Whether to use lower-constraints.txt when installing dependencies.
|
|
KURYR_CONTAINERS_USE_LOWER_CONSTRAINTS=${KURYR_CONTAINERS_USE_LOWER_CONSTRAINTS:-False}
|
|
|
|
# Kuryr overcloud VM port's name
|
|
KURYR_OVERCLOUD_VM_PORT=${KURYR_OVERCLOUD_VM_PORT:-port0}
|
|
|
|
KURYR_IPV6=${KURYR_IPV6:-False}
|