48 lines
1.3 KiB
YAML
48 lines
1.3 KiB
YAML
---
|
|
# Kubernetes Prerequisites Role Defaults
|
|
|
|
# Kubernetes version to install (should be overridden in group_vars)
|
|
kubernetes_version: "v1.33"
|
|
|
|
# Container runtime (containerd is default)
|
|
container_runtime: "containerd"
|
|
|
|
# CNI plugin to install
|
|
cni_plugin: "calico"
|
|
|
|
# Firewall configuration
|
|
configure_firewall: true
|
|
|
|
# Time synchronization
|
|
configure_ntp: true
|
|
|
|
# SELinux configuration
|
|
selinux_state: "permissive"
|
|
|
|
# Swap configuration
|
|
disable_swap: true
|
|
|
|
# Kernel modules to load
|
|
required_kernel_modules:
|
|
- overlay
|
|
- br_netfilter
|
|
|
|
# Sysctl parameters for Kubernetes
|
|
k8s_sysctl_params:
|
|
net.bridge.bridge-nf-call-iptables: 1
|
|
net.bridge.bridge-nf-call-ip6tables: 1
|
|
net.ipv4.ip_forward: 1
|
|
|
|
# Kubernetes firewall ports
|
|
k8s_firewall_ports:
|
|
- { protocol: "tcp", port: "6443" } # API server
|
|
- { protocol: "tcp", port: "2379" } # etcd client
|
|
- { protocol: "tcp", port: "2380" } # etcd peer
|
|
- { protocol: "tcp", port: "10250" } # kubelet
|
|
- { protocol: "tcp", port: "10251" } # kube-scheduler
|
|
- { protocol: "tcp", port: "10252" } # kube-controller-manager
|
|
- { protocol: "tcp", port: "10255" } # kubelet read-only
|
|
- { protocol: "tcp", port: "30000-32767" } # NodePort services
|
|
- { protocol: "udp", port: "4789" } # VXLAN (Flannel)
|
|
- { protocol: "tcp", port: "179" } # BGP (Calico)
|