mirror of https://github.com/kubernetes/kops.git
141 lines
3.3 KiB
YAML
141 lines
3.3 KiB
YAML
apiVersion: kops.k8s.io/v1alpha2
|
|
kind: Cluster
|
|
metadata:
|
|
creationTimestamp: "2016-12-10T22:42:27Z"
|
|
name: complex.example.com
|
|
spec:
|
|
api:
|
|
loadBalancer:
|
|
type: Public
|
|
additionalSecurityGroups:
|
|
- sg-exampleid3
|
|
- sg-exampleid4
|
|
crossZoneLoadBalancing: true
|
|
class: Network
|
|
sslCertificate: arn:aws:acm:us-test-1:000000000000:certificate/123456789012-1234-1234-1234-12345678
|
|
sslPolicy: ELBSecurityPolicy-2016-08
|
|
kubernetesApiAccess:
|
|
- 1.1.1.0/24
|
|
- 2001:0:8500::/40
|
|
channel: stable
|
|
cloudProvider: aws
|
|
cloudLabels:
|
|
Owner: John Doe
|
|
foo/bar: fib+baz
|
|
configBase: memfs://clusters.example.com/complex.example.com
|
|
etcdClusters:
|
|
- etcdMembers:
|
|
- instanceGroup: master-us-test-1a
|
|
name: us-test-1a
|
|
name: main
|
|
- etcdMembers:
|
|
- instanceGroup: master-us-test-1a
|
|
name: us-test-1a
|
|
name: events
|
|
iam:
|
|
permissionsBoundary: arn:aws:iam:00000000000:policy/boundaries
|
|
kubeAPIServer:
|
|
serviceNodePortRange: 28000-32767
|
|
auditWebhookBatchThrottleQps: 3.14
|
|
cpuRequest: 200m
|
|
cpuLimit: 500m
|
|
memoryRequest: 800Mi
|
|
memoryLimit: 1000Mi
|
|
kubelet:
|
|
anonymousAuth: false
|
|
kubernetesVersion: v1.14.0
|
|
masterInternalName: api.internal.complex.example.com
|
|
masterPublicName: api.complex.example.com
|
|
networkCIDR: 172.20.0.0/16
|
|
additionalNetworkCIDRs:
|
|
- 10.1.0.0/16
|
|
- 10.2.0.0/16
|
|
networking:
|
|
kubenet: {}
|
|
nodePortAccess:
|
|
- 1.2.3.4/32
|
|
- 10.20.30.0/24
|
|
nonMasqueradeCIDR: 100.64.0.0/10
|
|
sshAccess:
|
|
- 1.1.1.1/32
|
|
- 2001:0:85a3::/48
|
|
sshKeyName: ""
|
|
topology:
|
|
masters: public
|
|
nodes: public
|
|
subnets:
|
|
- cidr: 172.20.32.0/19
|
|
name: us-test-1a
|
|
type: Public
|
|
zone: us-test-1a
|
|
|
|
---
|
|
|
|
apiVersion: kops.k8s.io/v1alpha2
|
|
kind: InstanceGroup
|
|
metadata:
|
|
creationTimestamp: "2016-12-10T22:42:28Z"
|
|
name: nodes
|
|
labels:
|
|
kops.k8s.io/cluster: complex.example.com
|
|
spec:
|
|
additionalSecurityGroups:
|
|
- sg-exampleid3
|
|
- sg-exampleid4
|
|
associatePublicIp: true
|
|
suspendProcesses:
|
|
- AZRebalance
|
|
image: kope.io/k8s-1.4-debian-jessie-amd64-hvm-ebs-2016-10-21
|
|
machineType: t2.medium
|
|
maxSize: 2
|
|
minSize: 2
|
|
role: Node
|
|
subnets:
|
|
- us-test-1a
|
|
detailedInstanceMonitoring: true
|
|
rootVolumeDeleteOnTermination: false
|
|
rootVolumeEncryption: true
|
|
volumes:
|
|
- device: /dev/xvdd
|
|
deleteOnTermination: false
|
|
size: 20
|
|
type: gp2
|
|
encrypted: true
|
|
key: arn:aws:kms:us-test-1:000000000000:key/1234abcd-12ab-34cd-56ef-1234567890ab
|
|
additionalUserData:
|
|
- name: myscript.sh
|
|
type: text/x-shellscript
|
|
content: |
|
|
#!/bin/sh
|
|
echo "nodes: The time is now $(date -R)!" | tee /root/output.txt
|
|
|
|
---
|
|
|
|
apiVersion: kops.k8s.io/v1alpha2
|
|
kind: InstanceGroup
|
|
metadata:
|
|
creationTimestamp: "2016-12-10T22:42:28Z"
|
|
name: master-us-test-1a
|
|
labels:
|
|
kops.k8s.io/cluster: complex.example.com
|
|
spec:
|
|
associatePublicIp: true
|
|
image: kope.io/k8s-1.4-debian-jessie-amd64-hvm-ebs-2016-10-21
|
|
machineType: m3.medium
|
|
maxSize: 1
|
|
minSize: 1
|
|
role: Master
|
|
rootVolumeEncryption: true
|
|
rootVolumeEncryptionKey: arn:aws:kms:us-test-1:000000000000:key/1234abcd-12ab-34cd-56ef-1234567890ab
|
|
subnets:
|
|
- us-test-1a
|
|
instanceMetadata:
|
|
httpTokens: required
|
|
httpPutResponseHopLimit: 1
|
|
additionalUserData:
|
|
- name: myscript.sh
|
|
type: text/x-shellscript
|
|
content: |
|
|
#!/bin/sh
|
|
echo "nodes: The time is now $(date -R)!" | tee /root/output.txt
|