site_type/ovsdpdk/airship-treasuremap/global/v4.0/software/charts/kubernetes/container-networking/calico.yaml

   1 ---
   2 schema: armada/Chart/v1
   3 metadata:
   4   schema: metadata/Document/v1
   5   name: kubernetes-calico
   6   layeringDefinition:
   7     abstract: false
   8     layer: global
   9   labels:
  10     name: kubernetes-calico-global
  11   storagePolicy: cleartext
  12   substitutions:
  13     # Chart source
  14     - src:
  15         schema: pegleg/SoftwareVersions/v1
  16         name: software-versions
  17         path: .charts.kubernetes.calico.calico
  18       dest:
  19         path: .source
  20     # Image versions
  21     - src:
  22         schema: pegleg/SoftwareVersions/v1
  23         name: software-versions
  24         path: .images.calico.calico
  25       dest:
  26         path: .values.images.tags
  27     # IP addresses
  28     - src:
  29         schema: pegleg/CommonAddresses/v1
  30         name: common-addresses
  31         path: .calico.etcd.service_ip
  32       dest:
  33         path: .values.endpoints.etcd.host_fqdn_override.default
  34     - src:
  35         schema: pegleg/CommonAddresses/v1
  36         name: common-addresses
  37         path: .kubernetes.pod_cidr
  38       dest:
  39         path: .values.networking.podSubnet
  40     - src:
  41         schema: pegleg/CommonAddresses/v1
  42         name: common-addresses
  43         path: .kubernetes.api_service_ip
  44       dest:
  45         path: .values.conf.policy_controller.K8S_API
  46         pattern: SUB_KUBERNETES_IP
  47
  48     # Other site-specific configuration
  49     - src:
  50         schema: pegleg/CommonAddresses/v1
  51         name: common-addresses
  52         path: .calico.ip_autodetection_method
  53       dest:
  54         path: .values.conf.node.IP_AUTODETECTION_METHOD
  55
  56     # Certificates
  57     - src:
  58         schema: deckhand/CertificateAuthority/v1
  59         name: calico-etcd
  60         path: .
  61       dest:
  62         path: .values.endpoints.etcd.auth.client.tls.ca
  63     - src:
  64         schema: deckhand/Certificate/v1
  65         name: calico-node
  66         path: .
  67       dest:
  68         path: .values.endpoints.etcd.auth.client.tls.crt
  69     - src:
  70         schema: deckhand/CertificateKey/v1
  71         name: calico-node
  72         path: .
  73       dest:
  74         path: .values.endpoints.etcd.auth.client.tls.key
  75
  76 data:
  77   chart_name: calico
  78   release: kubernetes-calico
  79   namespace: kube-system
  80   protected:
  81     continue_processing: true
  82   wait:
  83     timeout: 600
  84     labels:
  85       release_group: airship-kubernetes-calico
  86   upgrade:
  87     no_hooks: false
  88     pre:
  89       delete:
  90         - type: job
  91           labels:
  92             release_group: airship-kubernetes-calico
  93   values:
  94     conf:
  95       cni_network_config:
  96         name: k8s-pod-network
  97         cniVersion: 0.1.0
  98         type: calico
  99         etcd_endpoints: __ETCD_ENDPOINTS__
 100         etcd_ca_cert_file: /etc/calico/pki/ca
 101         etcd_cert_file: /etc/calico/pki/crt
 102         etcd_key_file: /etc/calico/pki/key
 103         log_level: info
 104         mtu: 1500
 105         ipam:
 106           type: calico-ipam
 107         policy:
 108           type: k8s
 109           k8s_api_root: https://__KUBERNETES_SERVICE_HOST__:__KUBERNETES_SERVICE_PORT__
 110           k8s_auth_token: __SERVICEACCOUNT_TOKEN__
 111
 112       policy_controller:
 113         K8S_API: "https://SUB_KUBERNETES_IP:443"
 114
 115       node:
 116         CALICO_STARTUP_LOGLEVEL: INFO
 117         CLUSTER_TYPE:
 118           - k8s
 119           - bgp
 120         WAIT_FOR_STORAGE: "true"
 121
 122     endpoints:
 123       etcd:
 124         hosts:
 125           default: calico-etcd
 126         scheme:
 127           default: https
 128
 129     networking:
 130       mtu: 1500
 131       settings:
 132         mesh: "on"
 133         ippool:
 134           ipip:
 135             enabled: "true"
 136             mode: "always"
 137           nat_outgoing: "true"
 138           disabled: "false"
 139
 140     manifests:
 141       daemonset_calico_etcd: false
 142       job_image_repo_sync: false
 143       service_calico_etcd: false
 144   dependencies:
 145     - calico-htk
 146 ---
 147 schema: armada/Chart/v1
 148 metadata:
 149   schema: metadata/Document/v1
 150   name: calico-htk
 151   layeringDefinition:
 152     abstract: false
 153     layer: global
 154   storagePolicy: cleartext
 155   substitutions:
 156     - src:
 157         schema: pegleg/SoftwareVersions/v1
 158         name: software-versions
 159         path: .charts.kubernetes.calico.calico-htk
 160       dest:
 161         path: .source
 162 data:
 163   chart_name: calico-htk
 164   release: calico-htk
 165   namespace: calico-htk
 166   values: {}
 167   dependencies: []
 168 ...