-
Notifications
You must be signed in to change notification settings - Fork 10
/
bundle.yaml
122 lines (107 loc) · 3.62 KB
/
bundle.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
# OpenStack Contrail must be configured for nested mode!
#
# The following link-local services should be created:
#
# LL Service Name Service IP Service Port Fabric IP Fabric Port
# ---------------- ---------- ------------ --------- -----------
# K8s-cni-to-agent 10.10.10.5 9091 127.0.0.1 9091
#
# NOTE: Here 10.10.10.5 is the Service IP that was chosen by user. This can be any unused IP in the cluster
# NOTE: Please be accurate and fill all parameters from the underlay cloud below correctly.
series: bionic
services:
# contrail-kubernetes
contrail-kubernetes-master:
charm: cs:~juniper-os-software/contrail-kubernetes-master
series: bionic
options:
nested_mode: true
cluster_project: "{'domain':'default-domain','project':'admin'}"
cluster_network: "{'domain':'default-domain','project':'admin','name':'juju-net'}"
service_subnets: '10.96.0.0/12'
nested_mode_config: |
{
"CONTROLLER_NODES": "10.0.12.20",
"AUTH_MODE": "keystone",
"KEYSTONE_AUTH_ADMIN_TENANT": "admin",
"KEYSTONE_AUTH_ADMIN_USER": "admin",
"KEYSTONE_AUTH_ADMIN_PASSWORD": "password",
"KEYSTONE_AUTH_URL_VERSION": "/v2.0",
"KEYSTONE_AUTH_HOST": "10.0.12.108",
"KEYSTONE_AUTH_PROTO": "http",
"KEYSTONE_AUTH_PUBLIC_PORT":"5000",
"KEYSTONE_AUTH_REGION_NAME": "RegionOne",
"KEYSTONE_AUTH_INSECURE": "True",
"KUBERNESTES_NESTED_VROUTER_VIP": "10.10.10.5"
}
contrail-kubernetes-node:
charm: cs:~juniper-os-software/contrail-kubernetes-node
series: bionic
# kubernetes
easyrsa:
charm: cs:~containers/easyrsa-395
num_units: 1
to:
- '0'
etcd:
charm: cs:~containers/etcd-607
num_units: 1
options:
channel: auto
to:
- '0'
kubernetes-master:
charm: ch:kubernetes-control-plane
revision: 171
channel: '1.24/stable'
num_units: 1
options:
channel: 1.24/stable
service-cidr: '10.96.0.0/12'
enable-dashboard-addons: false
enable-metrics: false
dns-provider: 'none'
to:
- '0'
kubernetes-worker:
charm: ch:kubernetes-worker
revision: 44
channel: '1.24/stable'
num_units: 1
options:
channel: 1.24/stable
ingress: false
docker_runtime: 'custom'
authorization-mode: 'AlwaysAllow'
to:
- '5'
docker:
series: "bionic"
charm: cs:~containers/docker-59
options:
docker_runtime: 'custom'
docker_runtime_repo: 'deb [arch={ARCH}] https://download.docker.com/linux/ubuntu {CODE} stable'
docker_runtime_key_url: 'https://download.docker.com/linux/ubuntu/gpg'
docker_runtime_package: 'docker-ce'
relations:
# contrail-kubernetes
- [ contrail-kubernetes-node:cni, kubernetes-master:cni ]
- [ contrail-kubernetes-node:cni, kubernetes-worker:cni ]
- [ contrail-kubernetes-master:kube-api-endpoint, kubernetes-master:kube-api-endpoint ]
- [ contrail-kubernetes-master:contrail-kubernetes-config, contrail-kubernetes-node:contrail-kubernetes-config ]
- [ kubernetes-master:container-runtime, docker:docker]
- [ kubernetes-worker:container-runtime, docker:docker]
# kubernetes
- [ kubernetes-master:kube-api-endpoint, kubernetes-worker:kube-api-endpoint ]
- [ kubernetes-master:kube-control, kubernetes-worker:kube-control ]
- [ kubernetes-master:certificates, easyrsa:client ]
- [ kubernetes-master:etcd, etcd:db ]
- [ kubernetes-worker:certificates, easyrsa:client ]
- [ etcd:certificates, easyrsa:client ]
machines:
"0":
series: bionic
constraints: mem=4G cores=2 root-disk=20G
"5":
series: bionic
constraints: mem=1G cores=2 root-disk=20G