mrwho
bbf954ba09
- set ansible_user to 'mrwho' and disable SSH password authentication - upgrade k8s_version to 1.36 in all.yml (removed from control_plane.yml) - reduce traefik ingress routes to only k8s-dashboard and longhorn-ui with HTTPS - update host IP addresses to 172.20.21.x subnet - configure longhorn disk for k8s-worker-01
40 lines
833 B
YAML
40 lines
833 B
YAML
---
|
|
traefik_enable_ingress: true
|
|
traefik_ingress_class_name: "traefik"
|
|
traefik_namespace: kube-system
|
|
|
|
traefik_port_map:
|
|
|
|
- name: k8s-dashboard
|
|
port: 10001
|
|
backend:
|
|
namespace: kubernetes-dashboard
|
|
service: kubernetes-dashboard
|
|
port: 443
|
|
scheme: https
|
|
basicauth:
|
|
enabled: false
|
|
|
|
- name: longhorn-ui
|
|
port: 10002
|
|
backend:
|
|
namespace: longhorn-system
|
|
service: longhorn-frontend
|
|
port: 80
|
|
scheme: http
|
|
basicauth:
|
|
enabled: true
|
|
secret_name: traefik-auth-longhorn
|
|
|
|
# Template for future services:
|
|
# - name: my-service
|
|
# description: "Human-readable description"
|
|
# port: 10007
|
|
# backend:
|
|
# namespace: my-namespace
|
|
# service: my-service-name
|
|
# port: 8080
|
|
# scheme: http
|
|
# basicauth:
|
|
# enabled: false
|