site_type/ovsdpdk/airship-treasuremap/global/v4.0/profiles/kubernetes-host.yaml

   1 ---
   2 schema: promenade/HostSystem/v1
   3 metadata:
   4   schema: metadata/Document/v1
   5   name: host-system
   6   layeringDefinition:
   7     abstract: false
   8     layer: global
   9   storagePolicy: cleartext
  10   substitutions:
  11     - src:
  12         schema: pegleg/SoftwareVersions/v1
  13         name: software-versions
  14         path: .files.kubelet
  15       dest:
  16         path: .files[0].tar_url
  17
  18     # Initial CoreDNS image (used during node Genesis and node join)
  19     - src:
  20         schema: pegleg/SoftwareVersions/v1
  21         name: software-versions
  22         path: .images.kubernetes.coredns.coredns
  23       dest:
  24         path: .images.coredns
  25
  26     # Initial CoreDNS image (used during node Genesis and node join)
  27     - src:
  28         schema: pegleg/SoftwareVersions/v1
  29         name: software-versions
  30         path: .images.kubernetes.haproxy.haproxy
  31       dest:
  32         path: .images.haproxy
  33
  34     # Operational tools
  35     - src:
  36         schema: pegleg/SoftwareVersions/v1
  37         name: software-versions
  38         path: .images.ucp.armada.helm
  39       dest:
  40         path: .images.helm.helm
  41     - src:
  42         schema: pegleg/SoftwareVersions/v1
  43         name: software-versions
  44         path: .images.kubernetes.kubectl
  45       dest:
  46         path: .images.kubernetes.kubectl
  47
  48     # System packages
  49     - src:
  50         schema: pegleg/SoftwareVersions/v1
  51         name: software-versions
  52         path: .packages.named.docker
  53       dest:
  54         path: .packages.required.docker
  55     - src:
  56         schema: pegleg/SoftwareVersions/v1
  57         name: software-versions
  58         path: .packages.named.socat
  59       dest:
  60         path: .packages.required.socat
  61
  62     - src:
  63         schema: pegleg/SoftwareVersions/v1
  64         name: software-versions
  65         path: .packages.unnamed
  66       dest:
  67         path: .packages.additional
  68
  69     # Docker authorization
  70     - src:
  71         schema: deckhand/Passphrase/v1
  72         path: .
  73         name: private_docker_key
  74       dest:
  75         path: .files[2].content
  76         pattern: DH_SUB_PRIVATE_DOCKER_KEY
  77
  78 data:
  79   files:
  80     - path: /opt/kubernetes/bin/kubelet
  81       tar_path: kubernetes/node/bin/kubelet
  82       mode: 0555
  83     - path: /etc/logrotate.d/json-logrotate
  84       mode: 0444
  85       content: |-
  86         /var/lib/docker/containers/*/*-json.log
  87         {
  88             compress
  89             copytruncate
  90             create 0644 root root
  91             weekly
  92             dateext
  93             dateformat -%Y%m%d-%s
  94             maxsize 100M
  95             missingok
  96             notifempty
  97             su root root
  98             rotate 1
  99         }
 100     - path: /var/lib/kubelet/.dockercfg
 101       mode: 0400
 102       # NOTE: Sample key, this repo does not exist
 103       content: |-
 104         {
 105            "https://private.registry.com": {
 106              "auth": "DH_SUB_PRIVATE_DOCKER_KEY"
 107            }
 108         }
 109
 110   packages:
 111     repositories:
 112       - deb http://apt.dockerproject.org/repo ubuntu-xenial main
 113     keys:
 114       - |-
 115         -----BEGIN PGP PUBLIC KEY BLOCK-----
 116
 117         mQINBFWln24BEADrBl5p99uKh8+rpvqJ48u4eTtjeXAWbslJotmC/CakbNSqOb9o
 118         ddfzRvGVeJVERt/Q/mlvEqgnyTQy+e6oEYN2Y2kqXceUhXagThnqCoxcEJ3+KM4R
 119         mYdoe/BJ/J/6rHOjq7Omk24z2qB3RU1uAv57iY5VGw5p45uZB4C4pNNsBJXoCvPn
 120         TGAs/7IrekFZDDgVraPx/hdiwopQ8NltSfZCyu/jPpWFK28TR8yfVlzYFwibj5WK
 121         dHM7ZTqlA1tHIG+agyPf3Rae0jPMsHR6q+arXVwMccyOi+ULU0z8mHUJ3iEMIrpT
 122         X+80KaN/ZjibfsBOCjcfiJSB/acn4nxQQgNZigna32velafhQivsNREFeJpzENiG
 123         HOoyC6qVeOgKrRiKxzymj0FIMLru/iFF5pSWcBQB7PYlt8J0G80lAcPr6VCiN+4c
 124         NKv03SdvA69dCOj79PuO9IIvQsJXsSq96HB+TeEmmL+xSdpGtGdCJHHM1fDeCqkZ
 125         hT+RtBGQL2SEdWjxbF43oQopocT8cHvyX6Zaltn0svoGs+wX3Z/H6/8P5anog43U
 126         65c0A+64Jj00rNDr8j31izhtQMRo892kGeQAaaxg4Pz6HnS7hRC+cOMHUU4HA7iM
 127         zHrouAdYeTZeZEQOA7SxtCME9ZnGwe2grxPXh/U/80WJGkzLFNcTKdv+rwARAQAB
 128         tDdEb2NrZXIgUmVsZWFzZSBUb29sIChyZWxlYXNlZG9ja2VyKSA8ZG9ja2VyQGRv
 129         Y2tlci5jb20+iQI4BBMBAgAiBQJVpZ9uAhsvBgsJCAcDAgYVCAIJCgsEFgIDAQIe
 130         AQIXgAAKCRD3YiFXLFJgnbRfEAC9Uai7Rv20QIDlDogRzd+Vebg4ahyoUdj0CH+n
 131         Ak40RIoq6G26u1e+sdgjpCa8jF6vrx+smpgd1HeJdmpahUX0XN3X9f9qU9oj9A4I
 132         1WDalRWJh+tP5WNv2ySy6AwcP9QnjuBMRTnTK27pk1sEMg9oJHK5p+ts8hlSC4Sl
 133         uyMKH5NMVy9c+A9yqq9NF6M6d6/ehKfBFFLG9BX+XLBATvf1ZemGVHQusCQebTGv
 134         0C0V9yqtdPdRWVIEhHxyNHATaVYOafTj/EF0lDxLl6zDT6trRV5n9F1VCEh4Aal8
 135         L5MxVPcIZVO7NHT2EkQgn8CvWjV3oKl2GopZF8V4XdJRl90U/WDv/6cmfI08GkzD
 136         YBHhS8ULWRFwGKobsSTyIvnbk4NtKdnTGyTJCQ8+6i52s+C54PiNgfj2ieNn6oOR
 137         7d+bNCcG1CdOYY+ZXVOcsjl73UYvtJrO0Rl/NpYERkZ5d/tzw4jZ6FCXgggA/Zxc
 138         jk6Y1ZvIm8Mt8wLRFH9Nww+FVsCtaCXJLP8DlJLASMD9rl5QS9Ku3u7ZNrr5HWXP
 139         HXITX660jglyshch6CWeiUATqjIAzkEQom/kEnOrvJAtkypRJ59vYQOedZ1sFVEL
 140         MXg2UCkD/FwojfnVtjzYaTCeGwFQeqzHmM241iuOmBYPeyTY5veF49aBJA1gEJOQ
 141         TvBR8Q==
 142         =Fm3p
 143         -----END PGP PUBLIC KEY BLOCK-----
 144 ...