mrwho/Ansible-Roles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update longhorn kubernetes

Browse source
This commit is contained in:
mrwho 2026-07-14 22:26:20 +03:00
parent de4c5b68a7
commit 32f4228033
3 changed files with 43 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
filter_plugins/__pycache__/ipaddr.cpython-39.pyc
View file

Binary file not shown.

16
playbooks/mrwho/dns-local.yml
View file

@ -83,9 +83,13 @@
ip: 172.20.21.105
- name: sad
ip: 172.20.21.109
- name: rke-master01
ip: 172.20.21.210
- name: rancher
ip: 172.20.21.210
- name: rke-node01
ip: 172.20.21.211
- name: k8s-manager
ip: 172.20.21.200
- name: k8s-master01
ip: 172.20.21.201
- name: k8s-worker01
ip: 172.20.21.202
- name: kubernetes
ip: 172.20.21.100
- name: longhorn
ip: 172.20.21.100

35
playbooks/mrwho/router-nginx.yml
View file

@ -30,13 +30,13 @@
# - nginx-cors.conf
nginx_streams:
- stream: NTP
type: normal
listen_port: 123
protocol: udp
responses: 1
timeout: 3
backends:
- 10.203.2.11:123
- 10.203.2.12:123
- 172.20.21.100:123
nginx_virthosts:
- virthost_name: git.local.mrwho.ru
@ -47,6 +47,8 @@
# error_page: /path_to_error_page.html
ssl_enabled: true
ssl_only: true
nginx_ssl_cert_file: '/etc/letsencrypt/live/mrwho.ru/fullchain.pem'
nginx_ssl_cert_key: '/etc/letsencrypt/live/mrwho.ru/privkey.pem'
# ssl_letsencrypt_certs: "{{ nginx_letsencrypt_managed }}"
# root: "{{ nginx_webroot }}"
server_tokens: "off"
@ -64,6 +66,8 @@
# error_page: /path_to_error_page.html
ssl_enabled: true
ssl_only: true
nginx_ssl_cert_file: '/etc/letsencrypt/live/mrwho.ru/fullchain.pem'
nginx_ssl_cert_key: '/etc/letsencrypt/live/mrwho.ru/privkey.pem'
# ssl_letsencrypt_certs: "{{ nginx_letsencrypt_managed }}"
# root: "{{ nginx_webroot }}"
server_tokens: "off"
@ -74,6 +78,33 @@
- location: /
target: "https://172.20.21.105:9443"
- virthost_name: kubernetes.local.mrwho.ru
server_name: kubernetes.local.mrwho.ru
ssl_enabled: true
ssl_only: true
nginx_ssl_cert_file: '/etc/letsencrypt/live/mrwho.ru/fullchain.pem'
nginx_ssl_cert_key: '/etc/letsencrypt/live/mrwho.ru/privkey.pem'
server_tokens: "off"
proxy_standard_setup: true
proxy_additional_options:
- proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache:30m max_size=250m;
locations:
- location: /
target: "https://172.20.21.201:10001"
- virthost_name: longhorn.local.mrwho.ru
server_name: longhorn.local.mrwho.ru
ssl_enabled: true
ssl_only: true
nginx_ssl_cert_file: '/etc/letsencrypt/live/mrwho.ru/fullchain.pem'
nginx_ssl_cert_key: '/etc/letsencrypt/live/mrwho.ru/privkey.pem'
server_tokens: "off"
proxy_standard_setup: true
proxy_additional_options:
- proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache:30m max_size=250m;
locations:
- location: /
target: "https://172.20.21.201:10002"
###### Firewalld configuration ######
firewall:
# - previous: replaced # flush previous rules