- set ansible_user to 'mrwho' and disable SSH password authentication - upgrade k8s_version to 1.36 in all.yml (removed from control_plane.yml) - reduce traefik ingress routes to only k8s-dashboard and longhorn-ui with HTTPS - update host IP addresses to 172.20.21.x subnet - configure longhorn disk for k8s-worker-01
30 lines
781 B
YAML
30 lines
781 B
YAML
---
|
|
all:
|
|
children:
|
|
# Operator workstation: kubectl, helm, k9s
|
|
manager_nodes:
|
|
hosts:
|
|
k8s-manager-01:
|
|
ansible_host: 172.20.21.200
|
|
|
|
# Kubernetes cluster nodes
|
|
k8s_cluster:
|
|
children:
|
|
control_plane:
|
|
hosts:
|
|
k8s-master-01:
|
|
ansible_host: 172.20.21.201
|
|
workers:
|
|
hosts:
|
|
k8s-worker-01:
|
|
ansible_host: 172.20.21.202
|
|
longhorn_disks:
|
|
- device: /dev/sdb
|
|
mountpoint: /mnt/longhorn-disk1
|
|
# children:
|
|
# # Workers with an NVIDIA GPU attached (device plugin + node label)
|
|
# gpu_workers:
|
|
# hosts:
|
|
# k8s-worker-02:
|
|
# ansible_host: 10.203.0.212
|