-
Notifications
You must be signed in to change notification settings - Fork 0
/
k0sctl.yaml
63 lines (62 loc) · 1.83 KB
/
k0sctl.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
apiVersion: k0sctl.k0sproject.io/v1beta1
kind: Cluster
metadata:
name: homelab-cluster
spec:
hosts:
- role: controller+worker
privateAddress: 192.168.20.2
ssh:
address: hayama.tail1e178.ts.net
user: ubuntu
port: 22
- role: worker
privateAddress: 192.168.20.3
ssh:
address: kodaka.tail1e178.ts.net
user: ubuntu
port: 22
k0s:
version: 1.25.4+k0s.0
dynamicConfig: false
config:
apiVersion: k0s.k0sproject.io/v1beta1
kind: ClusterConfig
metadata:
name: homelab-cluster
spec:
api:
address: 192.168.20.2
port: 6443
k0sApiPort: 9443
sans:
- k8s.tosuke.me
- hayama.tail1e178.ts.net
extraArgs:
anonymous-auth: "true"
service-account-issuer: https://k8s.tosuke.me
service-account-jwks-uri: https://k8s.tosuke.me/openid/v1/jwks
oidc-issuer-url: https://id.tosuke.me
oidc-client-id: kubernetes
oidc-username-claim: name
oidc-username-prefix: "oidc:"
oidc-groups-claim: groups
oidc-groups-prefix: "oidc:"
storage:
type: kine
kine:
dataSource: "sqlite:///var/lib/k0s/state.db?mode=rwc&_journal=WAL&cache=shared"
controllerManager:
extraArgs:
node-cidr-mask-size-ipv4: "24"
node-cidr-mask-size-ipv6: "96"
network:
provider: custom
podCIDR: "10.244.0.0/16"
serviceCIDR: "10.96.0.0/16"
dualStack:
enabled: true
IPv6podCIDR: "240d:1a:d4e:c521:706f:6400::/88" # encode("pod") = [0x70, 0x6f, 0x64]
IPv6serviceCIDR: "240d:1a:d4e:c521:7376:6300::/112" # encode("svc") = [0x73, 0x76, 0x63]
kubeProxy:
disabled: true