Add omni template for my cluster.
This commit is contained in:
parent
f5bc72fff7
commit
724092279c
2 changed files with 140 additions and 1 deletions
1
.gitignore
vendored
1
.gitignore
vendored
|
|
@ -12,5 +12,4 @@ Thumbs.db
|
||||||
kubeconfig*
|
kubeconfig*
|
||||||
talosconfig.yaml
|
talosconfig.yaml
|
||||||
omniconfig.yaml
|
omniconfig.yaml
|
||||||
omni-template.yaml
|
|
||||||
config.xml
|
config.xml
|
||||||
|
|
|
||||||
140
omni-template.yaml
Normal file
140
omni-template.yaml
Normal file
|
|
@ -0,0 +1,140 @@
|
||||||
|
kind: Cluster
|
||||||
|
name: homelab
|
||||||
|
kubernetes:
|
||||||
|
version: v1.29.2
|
||||||
|
talos:
|
||||||
|
version: v1.6.4
|
||||||
|
features:
|
||||||
|
backupConfiguration:
|
||||||
|
interval: 1h0m0s
|
||||||
|
patches:
|
||||||
|
- idOverride: 500-2f051f5c-7177-4cbb-b3c9-801e5eb556b1
|
||||||
|
annotations:
|
||||||
|
name: increase fs events
|
||||||
|
inline:
|
||||||
|
machine:
|
||||||
|
sysctls:
|
||||||
|
fs.inotify.max_queued_events: "65536"
|
||||||
|
fs.inotify.max_user_instances: "8192"
|
||||||
|
fs.inotify.max_user_watches: "524288"
|
||||||
|
- idOverride: 500-602f425a-d488-4ecd-a528-68118bfc6cb1
|
||||||
|
annotations:
|
||||||
|
name: openebs local mounts
|
||||||
|
inline:
|
||||||
|
machine:
|
||||||
|
kubelet:
|
||||||
|
extraMounts:
|
||||||
|
- destination: /var/openebs/local
|
||||||
|
options:
|
||||||
|
- bind
|
||||||
|
- rshared
|
||||||
|
- rw
|
||||||
|
source: /var/openebs/local
|
||||||
|
type: bind
|
||||||
|
- idOverride: 500-63fc2c84-33e5-42ae-b79e-e48928d8ef9a
|
||||||
|
annotations:
|
||||||
|
description: Disables flannel and kube-proxy to make way for cilium.
|
||||||
|
name: disable-cni
|
||||||
|
inline:
|
||||||
|
cluster:
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
|
proxy:
|
||||||
|
disabled: true
|
||||||
|
- idOverride: 500-a6b7ecdb-884f-44b1-8eee-709a4b4d99a1
|
||||||
|
annotations:
|
||||||
|
description: Patch for spegel to work with containerd
|
||||||
|
name: spegel-containerd
|
||||||
|
inline:
|
||||||
|
machine:
|
||||||
|
files:
|
||||||
|
- content: |-
|
||||||
|
[plugins."io.containerd.grpc.v1.cri"]
|
||||||
|
enable_unprivileged_ports = true
|
||||||
|
enable_unprivileged_icmp = true
|
||||||
|
[plugins."io.containerd.grpc.v1.cri".containerd]
|
||||||
|
discard_unpacked_layers = false
|
||||||
|
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
|
||||||
|
discard_unpacked_layers = false
|
||||||
|
op: create
|
||||||
|
path: /etc/cri/conf.d/20-customization.part
|
||||||
|
permissions: 0
|
||||||
|
- idOverride: 500-b9b199c3-030b-48d2-a34b-dc47fa07372b
|
||||||
|
annotations:
|
||||||
|
name: default seccomp
|
||||||
|
inline:
|
||||||
|
machine:
|
||||||
|
kubelet:
|
||||||
|
defaultRuntimeSeccompProfileEnabled: true
|
||||||
|
---
|
||||||
|
kind: ControlPlane
|
||||||
|
machines:
|
||||||
|
- 4c4c4544-0038-4810-8057-b5c04f513232
|
||||||
|
- 4c4c4544-0047-3010-804a-b2c04f4d3232
|
||||||
|
- 4c4c4544-0047-4c10-8056-b7c04f513232
|
||||||
|
patches:
|
||||||
|
- idOverride: 500-0b228a5c-62b8-4f22-9908-2e98dcd82559
|
||||||
|
annotations:
|
||||||
|
description: Enable several monitoring services on the control planes
|
||||||
|
name: monitoring
|
||||||
|
inline:
|
||||||
|
cluster:
|
||||||
|
apiServer:
|
||||||
|
extraArgs:
|
||||||
|
bind-address: 0.0.0.0
|
||||||
|
controllerManager:
|
||||||
|
extraArgs:
|
||||||
|
bind-address: 0.0.0.0
|
||||||
|
etcd:
|
||||||
|
extraArgs:
|
||||||
|
listen-metrics-urls: http://0.0.0.0:2381
|
||||||
|
scheduler:
|
||||||
|
extraArgs:
|
||||||
|
bind-address: 0.0.0.0
|
||||||
|
- idOverride: 500-c714a4d2-d205-4bc2-924b-aa1a4c174d9a
|
||||||
|
annotations:
|
||||||
|
name: disable pod security
|
||||||
|
inline:
|
||||||
|
cluster:
|
||||||
|
apiServer:
|
||||||
|
disablePodSecurityPolicy: true
|
||||||
|
- idOverride: 500-f7275be8-0f4a-40f0-8da8-d2dcaa93e575
|
||||||
|
annotations:
|
||||||
|
name: remove admission contollers
|
||||||
|
inline:
|
||||||
|
cluster:
|
||||||
|
apiServer:
|
||||||
|
admissionControl:
|
||||||
|
- configuration:
|
||||||
|
exemptions:
|
||||||
|
namespaces:
|
||||||
|
- openebs-system
|
||||||
|
- security
|
||||||
|
- kyverno
|
||||||
|
- rook-ceph
|
||||||
|
name: PodSecurity
|
||||||
|
---
|
||||||
|
kind: Workers
|
||||||
|
machines:
|
||||||
|
- 325dfcd5-a5fa-d714-5037-8df713d9f4f1
|
||||||
|
- 4968005b-9579-5c15-6d32-7b58e850a7d9
|
||||||
|
- 95d6c80f-d76e-42c2-7e77-c9938b5b52bf
|
||||||
|
---
|
||||||
|
kind: Machine
|
||||||
|
name: 325dfcd5-a5fa-d714-5037-8df713d9f4f1
|
||||||
|
---
|
||||||
|
kind: Machine
|
||||||
|
name: 4968005b-9579-5c15-6d32-7b58e850a7d9
|
||||||
|
---
|
||||||
|
kind: Machine
|
||||||
|
name: 4c4c4544-0038-4810-8057-b5c04f513232
|
||||||
|
---
|
||||||
|
kind: Machine
|
||||||
|
name: 4c4c4544-0047-3010-804a-b2c04f4d3232
|
||||||
|
---
|
||||||
|
kind: Machine
|
||||||
|
name: 4c4c4544-0047-4c10-8056-b7c04f513232
|
||||||
|
---
|
||||||
|
kind: Machine
|
||||||
|
name: 95d6c80f-d76e-42c2-7e77-c9938b5b52bf
|
||||||
Loading…
Reference in a new issue