diff --git a/defaults/main.yml b/defaults/main.yml index d6fb683..49d542c 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -8,7 +8,10 @@ kubernetes_interface: '{{ ansible_default_ipv4.interface }}' kubernetes_kubeproxy_mode: ipvs kubernetes_version: 1.31.0 kubernetes_k3s_version: 1.31.0+k3s1 -kubernetes_pods_network: "10.244.0.0/16" +#kubernetes_pods_network: "10.244.0.0/16" +#kubernetes_svc_network: "10.96.0.0/12" +kubernetes_pods_network: "10.42.0.0/16" +kubernetes_svc_network: "10.43.0.0/16" lb_auth_pass: 1be344d62acc46c6858ae8475668a245 kubernetes_swap_enabled: false kubernetes_lvm: true diff --git a/tasks/RedHat.yml b/tasks/RedHat.yml index cae93ba..bcbf718 100644 --- a/tasks/RedHat.yml +++ b/tasks/RedHat.yml @@ -119,7 +119,7 @@ - kubernetes_server|bool with_items: - "{{ kubernetes_pods_network }}" - - "10.96.0.0/12" + - "{{ kubernetes_svc_network }}" - name: Add kubernetes networks to trusted firewalld zone ansible.posix.firewalld: diff --git a/templates/kubeadm-config.yaml.j2 b/templates/kubeadm-config.yaml.j2 index 00ee1b7..7d833b5 100644 --- a/templates/kubeadm-config.yaml.j2 +++ b/templates/kubeadm-config.yaml.j2 @@ -85,6 +85,7 @@ apiServer: {% if kubernetes_network == "flannel" or kubernetes_network == "calico" %} networking: podSubnet: "{{ kubernetes_pods_network }}" + serviceSubnet: "{{ kubernetes_svc_network }}" {% endif %} controllerManager: extraArgs: