ansible-create-k8s-user/defaults/main.yml

---
# ---------------------------------------------------------------------
# If set to true, the role won't install yq and kubeectl
# ---------------------------------------------------------------------
use_system_bins: false
# ---------------------------------------------------------------------
# yq version
# ---------------------------------------------------------------------
yq:
  version: v4.35.2
  binary: yq_linux_amd64
# ---------------------------------------------------------------------
# kubectl version
# ---------------------------------------------------------------------
kubectl:
  version: v1.26.6
  arch: amd64
# --------------------------------------
# -- Path to k8s admin config
# --------------------------------------
k8s_config_path: /etc/kubernetes/admin.conf
k8s_cert_path: /etc/kubernetes/pki
k8s_cert_crt_file: ca.crt
k8s_cert_key_file: ca.key
# --------------------------------------
# -- K8s username
# --------------------------------------
username: "admin"
# --------------------------------------
# -- How many days certificate
# -- will be valid
# --------------------------------------
certificate_expires_in: 500
# --------------------------------------
# -- K8s cluster name
# --------------------------------------
cluster: "microk8s-cluster"
# --------------------------------------
# -- RoleBinding parameters
# --------------------------------------
# -- Binding type:
# ---- ClusterRoleBinding
# ---- RoleBinding
# --------------------------------------
binding_type: ClusterRoleBinding
# --------------------------------------
# -- Role type
# -- ClusterRole
# -- Role
# --------------------------------------
role_type: ClusterRole
# --------------------------------------
# -- Cluster role name
# -- https://kubernetes.io/docs/reference/access-authn-authz/rbac/
# --------------------------------------
role: cluster-admin
# --------------------------------------
# users:
#   - username: "admin"
#     host_user: "admin"
#     cluster: "microk8s-cluster"
#     certificate_expires_in: 500
#     binding_type: ClusterRoleBinding
#     role_type: ClusterRole
#     role: cluster-admin
#     k8s_config_path: /etc/kubernetes/admin.conf
#     k8s_cert_path: /etc/kubernetes/pki
#     k8s_cert_crt_file: ca.crt
#     k8s_cert_key_file: ca.key
# --------------------------------------
users: []
# --------------------------------------
# -- Use with microk8s
# --------------------------------------
# k8s_config_path: /var/snap/microk8s/current/credentials/client.config
# k8s_cert_path: /var/snap/microk8s/current/certs
# --------------------------------------
# -- Use with k3s
# --------------------------------------
# k8s_config_path: /etc/rancher/k3s/k3s.yaml
# k8s_cert_path: /var/lib/rancher/k3s/server/tls
# k8s_cert_crt_file: server-ca.crt
# k8s_cert_key_file: server-ca.key
Migrate the role to a separate repo 2023-03-11 17:18:57 +00:00			`---`
Support saving configs per user 2024-02-14 10:19:18 +00:00			`# ---------------------------------------------------------------------`
			`# If set to true, the role won't install yq and kubeectl`
			`# ---------------------------------------------------------------------`
			`use_system_bins: false`
			`# ---------------------------------------------------------------------`
			`# yq version`
			`# ---------------------------------------------------------------------`
Migrate the role to a separate repo 2023-03-11 17:18:57 +00:00			`yq:`
Change the way binaries are installed Now binaries are installed to the workdir, so they do not affect the system. I want to have this role more or less containerized Also some minor refactoring has been done as well 2023-08-11 07:34:21 +00:00			`version: v4.35.2`
Migrate the role to a separate repo 2023-03-11 17:18:57 +00:00			`binary: yq_linux_amd64`
Support saving configs per user 2024-02-14 10:19:18 +00:00			`# ---------------------------------------------------------------------`
			`# kubectl version`
			`# ---------------------------------------------------------------------`
add support for multi-users 2023-07-16 20:07:38 +00:00			`kubectl:`
			`version: v1.26.6`
			`arch: amd64`
			`# --------------------------------------`
Migrate the role to a separate repo 2023-03-11 17:18:57 +00:00			`# -- Path to k8s admin config`
			`# --------------------------------------`
			`k8s_config_path: /etc/kubernetes/admin.conf`
Support saving configs per user 2024-02-14 10:19:18 +00:00			`k8s_cert_path: /etc/kubernetes/pki`
Migrate the role to a separate repo 2023-03-11 17:18:57 +00:00			`k8s_cert_crt_file: ca.crt`
			`k8s_cert_key_file: ca.key`
			`# --------------------------------------`
			`# -- K8s username`
			`# --------------------------------------`
			`username: "admin"`
			`# --------------------------------------`
Support saving configs per user 2024-02-14 10:19:18 +00:00			`# -- How many days certificate`
Migrate the role to a separate repo 2023-03-11 17:18:57 +00:00			`# -- will be valid`
			`# --------------------------------------`
			`certificate_expires_in: 500`
			`# --------------------------------------`
			`# -- K8s cluster name`
			`# --------------------------------------`
			`cluster: "microk8s-cluster"`
			`# --------------------------------------`
			`# -- RoleBinding parameters`
			`# --------------------------------------`
Support saving configs per user 2024-02-14 10:19:18 +00:00			`# -- Binding type:`
Migrate the role to a separate repo 2023-03-11 17:18:57 +00:00			`# ---- ClusterRoleBinding`
			`# ---- RoleBinding`
			`# --------------------------------------`
			`binding_type: ClusterRoleBinding`
			`# --------------------------------------`
			`# -- Role type`
			`# -- ClusterRole`
			`# -- Role`
			`# --------------------------------------`
			`role_type: ClusterRole`
			`# --------------------------------------`
			`# -- Cluster role name`
			`# -- https://kubernetes.io/docs/reference/access-authn-authz/rbac/`
			`# --------------------------------------`
			`role: cluster-admin`
add support for multi-users 2023-07-16 20:07:38 +00:00			`# --------------------------------------`
			`# users:`
			`# - username: "admin"`
Support saving configs per user 2024-02-14 10:19:18 +00:00			`# host_user: "admin"`
add support for multi-users 2023-07-16 20:07:38 +00:00			`# cluster: "microk8s-cluster"`
			`# certificate_expires_in: 500`
			`# binding_type: ClusterRoleBinding`
			`# role_type: ClusterRole`
			`# role: cluster-admin`
Change the way binaries are installed Now binaries are installed to the workdir, so they do not affect the system. I want to have this role more or less containerized Also some minor refactoring has been done as well 2023-08-11 07:34:21 +00:00			`# k8s_config_path: /etc/kubernetes/admin.conf`
Support saving configs per user 2024-02-14 10:19:18 +00:00			`# k8s_cert_path: /etc/kubernetes/pki`
Change the way binaries are installed Now binaries are installed to the workdir, so they do not affect the system. I want to have this role more or less containerized Also some minor refactoring has been done as well 2023-08-11 07:34:21 +00:00			`# k8s_cert_crt_file: ca.crt`
			`# k8s_cert_key_file: ca.key`
add support for multi-users 2023-07-16 20:07:38 +00:00			`# --------------------------------------`
			`users: []`
Migrate the role to a separate repo 2023-03-11 17:18:57 +00:00			`# --------------------------------------`
			`# -- Use with microk8s`
			`# --------------------------------------`
Support saving configs per user 2024-02-14 10:19:18 +00:00			`# k8s_config_path: /var/snap/microk8s/current/credentials/client.config`
Migrate the role to a separate repo 2023-03-11 17:18:57 +00:00			`# k8s_cert_path: /var/snap/microk8s/current/certs`
Change the way binaries are installed Now binaries are installed to the workdir, so they do not affect the system. I want to have this role more or less containerized Also some minor refactoring has been done as well 2023-08-11 07:34:21 +00:00			`# --------------------------------------`
			`# -- Use with k3s`
			`# --------------------------------------`
			`# k8s_config_path: /etc/rancher/k3s/k3s.yaml`
			`# k8s_cert_path: /var/lib/rancher/k3s/server/tls`
			`# k8s_cert_crt_file: server-ca.crt`
			`# k8s_cert_key_file: server-ca.key`