1 {{- range $clusterName, $cluster := .Values.clusters }}
3 apiVersion: bootstrap.cluster.x-k8s.io/v1alpha4
4 kind: KubeadmConfigTemplate
6 name: {{ $clusterName }}-workers
13 node-labels: metal3.io/uuid={{ "{{" }} ds.meta_data.uuid {{ "}}" }}
14 cpu-manager-policy: static
15 topology-manager-policy: best-effort
16 kube-reserved: cpu=100m,memory=256Mi
17 name: '{{ "{{" }} ds.meta_data.name {{ "}}" }}'
19 {{- if $cluster.networks }}
20 # Without touching up /etc/hosts, kubeadm may pick the wrong
21 # (i.e. provisioning network) address for the node IP
22 - sed -i "1i $(ip -4 addr show dev {{ $cluster.networks.baremetal.interface }} | grep -oP '(?<=inet\s)\d+(\.\d+){3}' | head -1) $(hostname)" /etc/hosts
24 - curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add -
25 - add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
26 - curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | apt-key add -
27 - add-apt-repository "deb https://apt.kubernetes.io/ kubernetes-xenial main"
29 - apt-get install -y ca-certificates
30 - /usr/local/bin/install-container-runtime.sh
31 - apt-get install -y kubelet={{ $cluster.kubeVersion }} kubeadm={{ $cluster.kubeVersion }} kubectl={{ $cluster.kubeVersion }}
32 - systemctl enable --now kubelet
34 # This must be done after kubeadm as the cabpk provider relies
35 # on files in /var/run, which won't persist after a reboot
36 - /usr/local/bin/set_kernel_cmdline.sh
38 {{ include "clusters.containerRuntime" $cluster | indent 6 }}
39 - path: /etc/systemd/system/containerd.service.d/override.conf
41 {{ $.Files.Get "resources/override.conf" | indent 10 }}
42 - path: /usr/local/bin/set_kernel_cmdline.sh
45 {{ $.Files.Get "resources/set_kernel_cmdline.sh" | indent 10 }}
47 - name: {{ $cluster.userData.name }}
49 lockPassword: False # Necessary to allow password login
50 passwd: {{ $cluster.userData.hashedPassword }}
52 - {{ $cluster.userData.sshAuthorizedKey }}
53 sudo: "ALL=(ALL) NOPASSWD:ALL"
56 - {{ $cluster.userData.sshAuthorizedKey }}