ansible-role-k8s-storage/templates/longhorn/longhorn-values.yaml.j2

48 lines
1.6 KiB
Django/Jinja

persistence:
defaultClass: false
# defaultClassReplicaCount: 3
# reclaimPolicy: Delete
recurringJobSelector:
enable: true
jobList: '[
{
"name":"snapshot",
"isGroup":true
},
{
"name":"backup-daily",
"isGroup":true
}
]'
defaultSettings:
defaultDataPath: "/var/lib/longhorn/"
backupTarget: "nfs://longhorn-test-nfs-svc.default:/opt/backupstore"
allowRecurringJobWhileVolumeDetached: true
createDefaultDiskLabeledNodes: true
replicaSoftAntiAffinity: false
# defaultReplicaCount: 2
defaultDataLocality: best-effort
# defaultLonghornStaticStorageClass: longhorn
# disableSchedulingOnCordonedNode: false
replicaZoneSoftAntiAffinity: false
concurrentAutomaticEngineUpgradePerNodeLimit: 3
guaranteed-engine-manager-cpu: 6
guaranteed-replica-manager-cpu: 6
ingress:
enabled: true
host: "longhorn.{{ cluster_domain }}"
# tls: true
# tlsSecret: "longhorn.{{ cluster_domain }}"
annotations:
kubernetes.io/ingress.class: traefik
# cert-manager.io/cluster-issuer: letsencrypt-prod
{% if ingress_whitelist is defined %}
ingress.kubernetes.io/whitelist-source-range: "{% for acl_whitelist in ingress_whitelist %}{{ acl_whitelist }}{% if not loop.last %}, {% endif %}{% endfor %}"
{% endif %}
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
{% if basic_auth is defined %}
traefik.ingress.kubernetes.io/router.middlewares: basic-auth@file
{% endif %}
external-dns.alpha.kubernetes.io/hostname: longhorn.{{ cluster_domain }}
external-dns.alpha.kubernetes.io/target: traefik.{{ cluster_domain }}
#enablePSP: true