starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-07-09 06:05:10 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity

fix(k3s cluster): fix typo, remove traefik

Browse Source
This commit is contained in:
Ryan Yin
2024-03-17 11:25:26 +08:00
parent 26ee648569
commit fbd13d6f00
7 changed files with 19 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/k8s/README.md
+1 -1
View File
@@ -27,7 +27,7 @@ full featured(see [what-have-k3s-removed-from-upstream-kubernetes] for details).
## Kubernetes Resources ## Kubernetes Resources
Kubernetes resources are deployed and managed separately through Kubernetes resources are deployed and managed separately through
[nix-config/pulumi/k8s/](../../pulumi/k8s/). [ryan4yin/k8s-gitops](https://github.com/ryan4yin/k8s-gitops).
[k3s]: https://github.com/k3s-io/k3s/ [k3s]: https://github.com/k3s-io/k3s/
[what-have-k3s-removed-from-upstream-kubernetes]: [what-have-k3s-removed-from-upstream-kubernetes]:
hosts/k8s/k3s-prod-1-master-1/k3s.nix
+3 -2
View File
@@ -35,8 +35,9 @@ in {
+ " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt + " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt
+ " --node-taint=CriticalAddonsOnly=true:NoExecute" # prevent workloads from running on the master + " --node-taint=CriticalAddonsOnly=true:NoExecute" # prevent workloads from running on the master
+ " --data-dir /var/lib/rancher/k3s" + " --data-dir /var/lib/rancher/k3s"
+ " --disable-helm-controller" + " --disable-helm-controller" # we use fluxcd instead
+ " --disable=traefik" # deploy our own ingress controller instead
+ " --etcd-expose-metrics true" + " --etcd-expose-metrics true"
+ ''--etcd-snapshot-schedule-cron "0 */12 * * *"''; + " --etcd-snapshot-schedule-cron '0 */12 * * *'";
}; };
} }
hosts/k8s/k3s-prod-1-master-2/k3s.nix
+3 -2
View File
@@ -23,8 +23,9 @@ in {
+ " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt + " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt
+ " --node-taint=CriticalAddonsOnly=true:NoExecute" # prevent workloads from running on the master + " --node-taint=CriticalAddonsOnly=true:NoExecute" # prevent workloads from running on the master
+ " --data-dir /var/lib/rancher/k3s" + " --data-dir /var/lib/rancher/k3s"
+ " --disable-helm-controller" + " --disable-helm-controller" # we use fluxcd instead
+ " --disable=traefik" # deploy our own ingress controller instead
+ " --etcd-expose-metrics true" + " --etcd-expose-metrics true"
+ ''--etcd-snapshot-schedule-cron "0 */12 * * *"''; + " --etcd-snapshot-schedule-cron '0 */12 * * *'";
}; };
} }
hosts/k8s/k3s-prod-1-master-3/k3s.nix
+3 -2
View File
@@ -23,8 +23,9 @@ in {
+ " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt + " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt
+ " --node-taint=CriticalAddonsOnly=true:NoExecute" # prevent workloads from running on the master + " --node-taint=CriticalAddonsOnly=true:NoExecute" # prevent workloads from running on the master
+ " --data-dir /var/lib/rancher/k3s" + " --data-dir /var/lib/rancher/k3s"
+ " --disable-helm-controller" + " --disable-helm-controller" # we use fluxcd instead
+ " --disable=traefik" # deploy our own ingress controller instead
+ " --etcd-expose-metrics true" + " --etcd-expose-metrics true"
+ ''--etcd-snapshot-schedule-cron "0 */12 * * *"''; + " --etcd-snapshot-schedule-cron '0 */12 * * *'";
}; };
} }
hosts/k8s/kubevirt-shoryu/k3s.nix
+3 -2
View File
@@ -34,8 +34,9 @@ in {
+ " --service-node-port-range 80-32767" + " --service-node-port-range 80-32767"
+ " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt + " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt
+ " --data-dir /var/lib/rancher/k3s" + " --data-dir /var/lib/rancher/k3s"
+ " --disable-helm-controller" + " --disable-helm-controller" # we use fluxcd instead
+ " --disable=traefik" # deploy our own ingress controller instead
+ " --etcd-expose-metrics true" + " --etcd-expose-metrics true"
+ ''--etcd-snapshot-schedule-cron "0 */12 * * *"''; + " --etcd-snapshot-schedule-cron '0 */12 * * *'";
}; };
} }
hosts/k8s/kubevirt-shushou/k3s.nix
+3 -2
View File
@@ -34,8 +34,9 @@ in {
+ " --service-node-port-range 80-32767" + " --service-node-port-range 80-32767"
+ " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt + " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt
+ " --data-dir /var/lib/rancher/k3s" + " --data-dir /var/lib/rancher/k3s"
+ " --disable-helm-controller" + " --disable-helm-controller" # we use fluxcd instead
+ " --disable=traefik" # deploy our own ingress controller instead
+ " --etcd-expose-metrics true" + " --etcd-expose-metrics true"
+ ''--etcd-snapshot-schedule-cron "0 */12 * * *"''; + " --etcd-snapshot-schedule-cron '0 */12 * * *'";
}; };
} }
hosts/k8s/kubevirt-youko/k3s.nix
+3 -2
View File
@@ -34,8 +34,9 @@ in {
+ " --service-node-port-range 80-32767" + " --service-node-port-range 80-32767"
+ " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt + " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt
+ " --data-dir /var/lib/rancher/k3s" + " --data-dir /var/lib/rancher/k3s"
+ " --disable-helm-controller" + " --disable-helm-controller" # we use fluxcd instead
+ " --disable=traefik" # deploy our own ingress controller instead
+ " --etcd-expose-metrics true" + " --etcd-expose-metrics true"
+ ''--etcd-snapshot-schedule-cron "0 */12 * * *"''; + " --etcd-snapshot-schedule-cron '0 */12 * * *'";
}; };
} }