Felix Nehrke
f19a1f61c9
I'm oversaw completely, that I have to change the SSH-port for all nodes in the cluster otherwise I cannot provide a meaningful load-balancer for the git-ssh port in it. Additionally this allowed me to fix some config errors which I simply oversaw.
29 lines
937 B
YAML
29 lines
937 B
YAML
all:
|
|
vars:
|
|
api_endpoint: "{{ hostvars[groups['server'][0]]['ansible_host'] | default(groups['server'][0]) }}"
|
|
cert_manager_state: present
|
|
cert_manager_version: v1.18.2
|
|
letsencrypt_clusterissuers:
|
|
staging:
|
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
email: "{{ vault_letsencrypt_issuer_email }}"
|
|
prod:
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
email: "{{ vault_letsencrypt_issuer_email }}"
|
|
|
|
k3s_cluster:
|
|
vars:
|
|
ansible_user: root
|
|
# note the space between the IPs!
|
|
dns_servers: 8.8.8.8 8.8.4.4
|
|
|
|
agent:
|
|
vars:
|
|
ansible_ssh_common_args: -o StrictHostKeyChecking=accept-new -o ProxyCommand="ssh -p {{ hostvars[groups['server'][0]]['ansible_port'] }} -W %h:%p -q root@{{ api_endpoint }}"
|
|
k3s_version: v1.31.6+k3s1
|
|
|
|
server:
|
|
vars:
|
|
ansible_ssh_common_args: '-o StrictHostKeyChecking=accept-new'
|
|
k3s_version: v1.31.6+k3s1
|