mirror of
https://github.com/puppetmaster/typhoon.git
synced 2025-02-17 02:11:28 +01:00
1feefbe9c6
* Add calico-ipam CRDs and RBAC permissions * Switch IPAM from host-local to calico-ipam * `calico-ipam` subnets `ippools` (defaults to pod CIDR) into `ipamblocks` (defaults to /26, but set to /24 in Typhoon) * `host-local` subnets the pod CIDR based on the node PodCIDR field (set via kube-controller-manager as /24's) * Create a custom default IPv4 IPPool to ensure the block size is kept at /24 to allow 110 pods per node (Kubernetes default) * Retaining host-local was slightly preferred, but Calico v3.6 is migrating all usage to calico-ipam. The codepath that skipped calico-ipam for KDD was removed * https://docs.projectcalico.org/v3.6/release-notes/
19 lines
788 B
HCL
19 lines
788 B
HCL
# Self-hosted Kubernetes assets (kubeconfig, manifests)
|
|
module "bootkube" {
|
|
source = "git::https://github.com/poseidon/terraform-render-bootkube.git?ref=23f81a5e8c4a975750beabc6f603a60a04621225"
|
|
|
|
cluster_name = "${var.cluster_name}"
|
|
api_servers = ["${format("%s.%s", var.cluster_name, var.dns_zone)}"]
|
|
etcd_servers = ["${aws_route53_record.etcds.*.fqdn}"]
|
|
asset_dir = "${var.asset_dir}"
|
|
networking = "${var.networking}"
|
|
network_mtu = "${var.network_mtu}"
|
|
pod_cidr = "${var.pod_cidr}"
|
|
service_cidr = "${var.service_cidr}"
|
|
cluster_domain_suffix = "${var.cluster_domain_suffix}"
|
|
enable_reporting = "${var.enable_reporting}"
|
|
|
|
# Fedora
|
|
trusted_certs_dir = "/etc/pki/tls/certs"
|
|
}
|