-
Notifications
You must be signed in to change notification settings - Fork 21
/
Copy pathpackage_arm64.yaml
375 lines (370 loc) · 13.5 KB
/
package_arm64.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
metadata:
version: spray-v2.21.0c_k8s-v1.26.3_v4.3-arm64
type: kubernetes-offline-resource
kuboard_spray_version:
min: v1.2.4
available_at:
- registry.cn-shanghai.aliyuncs.com/kuboard-spray/kuboard-spray-resource
- swr.cn-east-2.myhuaweicloud.com/kuboard/kuboard-spray-resource
- eipwork/kuboard-spray-resource
issue_date: "2023-3-26"
owner: "[email protected]"
can_upgrade_from:
include:
- spray-v2.21.0[a-c]_k8s-v1.26.[0-2]*_v4.[1-2]-arm64
- spray-v2.20.0[a-b]_k8s-v1.25.[0-9]*_v3.[0-9]*-arm64
exclude:
can_replace_to:
supported_os:
- distribution: Ubuntu
versions:
- "20.04"
- "22.04"
- distribution: Anolis
versions:
- "8.4"
- "8.5"
- "8.6"
- distribution: CentOS
versions:
- "7.6"
- "7.8"
- "7.9"
- "8"
- distribution: RedHat
versions:
- "7.9"
- "8.5"
- distribution: OracleLinux
versions:
- "8.5"
- "8.7"
- "9.1"
- distribution: Rocky
versions:
- "8.5"
- "8.7"
- "9.1"
- distribution: openEuler
versions:
- "20.03"
- "22.03"
- distribution: Kylin Linux Advanced Server
versions:
- "V10"
- distribution: openSUSE Leap
versions:
- "15.3"
- distribution: UnionTech OS Server 20
versions:
- "20"
- distribution: AlmaLinux
versions:
- "8.7"
- "9.1"
supported_feature:
eviction_hard: true
data:
kubespray_version: v2.21.0c
supported_playbooks:
install_cluster: pb_cluster.yaml
remove_node: pb_remove_node.yaml
add_node: pb_scale.yaml
sync_nginx_config: pb_sync_nginx_config.yaml
sync_etcd_address: pb_sync_etcd_address.yaml
install_addon: pb_install_addon.yaml
remove_addon: pb_remove_addon.yaml
cluster_version_containerd: pb_cluster_version_containerd.yaml
cluster_version_docker: pb_cluster_version_docker.yaml
upgrade_cluster: pb_upgrade_cluster.yaml
drain_node: pb_drain_node.yaml
uncordon_node: pb_uncordon_node.yaml
cis_scan: true # 只在此属性为 true 的时候激活 CIS 扫描
renew_cert: pb_renew_cert.yaml
sync_container_engine_params: pb_sync_container_engine_params.yaml
backup_etcd: pb_backup_etcd.yaml
restore_etcd: pb_restore_etcd.yaml
kubernetes:
kube_version: "v1.26.3"
image_arch: arm64
gcr_image_repo: "gcr.io"
kube_image_repo: "k8s.gcr.io"
candidate_admission_plugins: AlwaysAdmit,AlwaysDeny,CertificateApproval,CertificateSigning,CertificateSubjectRestriction,DefaultIngressClass,DefaultStorageClass,DefaultTolerationSeconds,DenyServiceExternalIPs,EventRateLimit,ExtendedResourceToleration,ImagePolicyWebhook,LimitPodHardAntiAffinityTopology,LimitRanger,MutatingAdmissionWebhook,NamespaceAutoProvision,NamespaceExists,NamespaceLifecycle,NodeRestriction,OwnerReferencesPermissionEnforcement,PersistentVolumeClaimResize,PersistentVolumeLabel,PodNodeSelector,PodSecurity,PodTolerationRestriction,Priority,ResourceQuota,RuntimeClass,SecurityContextDeny,ServiceAccount,StorageObjectInUseProtection,TaintNodesByCondition,ValidatingAdmissionWebhook
default_enabled_admission_plugins: CertificateApproval,CertificateSigning,CertificateSubjectRestriction,DefaultIngressClass,DefaultStorageClass,DefaultTolerationSeconds,LimitRanger,MutatingAdmissionWebhook,NamespaceLifecycle,PersistentVolumeClaimResize,Priority,ResourceQuota,RuntimeClass,ServiceAccount,StorageObjectInUseProtection,TaintNodesByCondition,ValidatingAdmissionWebhook
container_engine:
- container_manager: "containerd"
params:
containerd_version: 1.6.19
# - container_manager: "docker"
# params:
# docker_version: "20.10"
# docker_containerd_version: 1.4.12
vars:
target:
containerd_version: 1.6.19
etcd_version: v3.5.6
calico_version: "v3.24.5"
flannel_cni_version: "v1.2.0"
kubelet_checksums:
arm64:
v1.26.3: d360f919c279a05441b27178030c3d17134c1f257c95f4b22bdb28c2290993e7
amd64:
v1.26.3: 992d6298bd494b65f54c838419773c4976aca72dfb36271c613537efae7ab7d2
kubectl_checksums:
arm64:
v1.26.3: 0f62cbb6fafa109f235a08348d74499a57bb294c2a2e6ee34be1fa83432fec1d
amd64:
v1.26.3: 026c8412d373064ab0359ed0d1a25c975e9ce803a093d76c8b30c5996ad73e75
kubeadm_checksums:
arm64:
v1.26.3: e9a7dbca77f9576a98af1db8747e9dc13e930e40295eaa259dd99fd6e17a173f
amd64:
v1.26.3: 87a1bf6603e252a8fa46be44382ea218cb8e4f066874d149dc589d0f3a405fed
crun_checksums:
arm64:
1.4.5: 64a01114060ec12e66b1520c6ee6967410022d1ec73cdc7d14f952343c0769f2
amd64:
1.4.5: 84cf20a6060cd53ac21a0590367d1ab65f74baae005c42f2d5bc1af918470455
runc_checksums:
arm64:
v1.1.4: dbb71e737eaef454a406ce21fd021bd8f1b35afb7635016745992bbd7c17a223
amd64:
v1.1.4: db772be63147a4e747b4fe286c7c16a2edc4a8458bd3092ea46aaee77750e8ce
containerd_archive_checksums:
arm64:
1.6.19: 25a0dd6cce4e1058824d6dc277fc01dc45da92539ccb39bb6c8a481c24d2476e
amd64:
1.6.19: 3262454d9b3581f4d4da0948f77dde1be51cfc42347a1548bc9ab6870b055815..
nerdctl_archive_checksums:
arm64:
1.0.0: 27622c9d95efe6d807d5f3770d24ddd71719c6ae18f76b5fc89663a51bcd6208
amd64:
1.0.0: 3e993d714e6b88d1803a58d9ff5a00d121f0544c35efed3a3789e19d6ab36964
etcd_binary_checksums:
arm64:
v3.5.6: 888e25c9c94702ac1254c7655709b44bb3711ebaabd3cb05439f3dd1f2b51a87
amd64:
v3.5.6: 4db32e3bc06dd0999e2171f76a87c1cffed8369475ec7aa7abee9023635670fb
cni_binary_checksums:
arm64:
v1.2.0: 525e2b62ba92a1b6f3dc9612449a84aa61652e680f7ebf4eff579795fe464b57
amd64:
v1.2.0: f3a841324845ca6bf0d4091b4fc7f97e18a623172158b72fc3fdcdb9d42d2d37
flannel_cni_binary_checksums:
arm64:
v1.2.0: f813ae49b7b84eb95db73f7a3c34d2ee101f8cfc27e3a8054297a36d53308543
amd64:
v1.2.0: 63906a5b7dc78fbf1fbd484adbf4931aea5b15546ece3c7202c779ab9ea994a2
flannel_image_repo: "{{ docker_image_repo }}/flannelcni/flannel"
flannel_image_tag: "{{ flannel_version }}-{{ image_arch }}"
flannel_init_image_repo: "{{ docker_image_repo }}/flannelcni/flannel-cni-plugin"
flannel_init_image_tag: "{{ flannel_cni_version }}-{{ image_arch }}"
calicoctl_download_url: "https://github.com/projectcalico/calico/releases/download/{{ calico_ctl_version }}/calicoctl-linux-{{ image_arch }}"
calicoctl_binary_checksums:
amd64:
v3.24.5: 01e6c8a2371050f9edd0ade9dcde89da054e84d8e96bd4ba8cf82806c8d3e8e7
arm64:
v3.24.5: 2d56b768ed346129b0249261db27d97458cfb35f98bd028a0c817a23180ab2d2
calico_crds_archive_checksums:
v3.24.5: 10320b45ebcf4335703d692adacc96cdd3a27de62b4599238604bd7b0bedccc3
krew_archive_checksums:
linux:
arm64:
v0.4.3: 0994923848882ad0d4825d5af1dc227687a10a02688f785709b03549dd34d71d
amd64:
v0.4.3: 5df32eaa0e888a2566439c4ccb2ef3a3e6e89522f2f2126030171e2585585e4f
crictl_checksums:
arm64:
v1.26.0: b632ca705a98edc8ad7806f4279feaff956ac83aa109bba8a85ed81e6b900599
amd64:
v1.26.0: cda5e2143bf19f6b548110ffba0fe3565e03e8743fadd625fee3d62fc4134eed
snapshot_controller_image_tag: "v4.2.1"
dns_min_replicas: "{{ [ 2, groups['kube_control_plane'] | length ] | min }}"
kuboardspray_extra_downloads:
kuboard:
container: true
file: false
enabled: "{{ kuboard_enabled | default(false) }}"
version: "{{ kuboard_version | default('v3.5.2.3') }}"
repo: "eipwork/kuboard"
tag: "{{ kuboard_version }}"
sha256: ""
groups:
- kube_control_plane
netcheck_etcd:
container: true
file: false
enabled: "{{ deploy_netchecker }}"
version: "{{ netcheck_etcd_image_tag }}"
dest: "{{ local_release_dir }}/etcd-{{ netcheck_etcd_image_tag }}-linux-{{ image_arch }}.tar.gz"
repo: "{{ etcd_image_repo }}"
tag: "{{ netcheck_etcd_image_tag }}"
sha256: >-
{{ etcd_digest_checksum|d(None) }}
unarchive: false
owner: "root"
mode: "0755"
groups:
- k8s_cluster
coredns:
enabled: "{{ dns_mode in ['coredns', 'coredns_dual'] }}"
container: true
repo: "{{ coredns_image_repo }}"
tag: "{{ coredns_image_tag }}"
sha256: "{{ coredns_digest_checksum|default(None) }}"
groups:
- k8s_cluster
etcd:
etcd_version: v3.5.6
etcd_params:
etcd_deployment_type:
- "host"
dependency:
- name: crun
version: 1.4.5
target: crun_version
- name: krew
version: "v0.4.3"
target: krew_version
- name: runc
version: v1.1.4
target: runc_version
- name: cni-plugins
version: "v1.2.0"
target: cni_version
- name: crictl
version: "v1.26.0"
target: crictl_version
- name: nerdctl
version: "1.0.0"
target: nerdctl_version
- name: nginx_image
version: 1.23.2
target: nginx_image_tag
- name: coredns
target: coredns_version
version: "v1.9.3"
- name: cluster-proportional-autoscaler
target: dnsautoscaler_version
version: 1.8.5
- name: pause
target: pod_infra_version
version: "3.8"
network_plugin:
- name: calico
params:
calico_version: "v3.24.5"
- name: flannel
params:
flannel_version: "v0.20.2"
flannel_cni_version: "v1.2.0"
addon:
- name: kuboard
target: kuboard_enabled
lifecycle:
install_by_default: true
check:
shell: "kubectl get pods -n kuboard -l k8s.kuboard.cn/name=kuboard-v3"
keyword: 'kuboard-v3'
install_addon_tags:
- download
- upgrade
- kuboard
remove_addon_tags:
- upgrade
- kuboard
downloads:
- kuboard
params_default:
kuboard_version: 'v3.5.2.3'
kuboard_port: 80
kuboard_cluster_name: 'default'
kuboard_data_dir: '/root/kuboard-data'
params:
- name: nodelocaldns
target: enable_nodelocaldns
lifecycle:
install_by_default: true
check:
shell: "kubectl get daemonset -n kube-system nodelocaldns -o json"
keyword: '"k8s-app": "kube-dns"'
install_addon_tags:
- download
- upgrade
- coredns
- nodelocaldns
downloads:
- nodelocaldns
- coredns
params:
nodelocaldns_version: "1.22.18"
enable_nodelocaldns_secondary: false
# - name: netchecker
# target: deploy_netchecker
# lifecycle:
# install_by_default: true
# check:
# shell: "kubectl get deployment -n {{ netcheck_namespace | default('default') }} netchecker-server -o json"
# keyword: "k8s-netchecker-server"
# install_addon_tags:
# - download
# - upgrade
# - netchecker
# remove_addon_tags:
# - upgrade
# - netchecker
# downloads:
# - netcheck_server
# - netcheck_agent
# - netcheck_etcd
# params:
# netcheck_version: "v1.2.2"
# netcheck_agent_image_repo: "{{ docker_image_repo }}/mirantis/k8s-netchecker-agent"
# netcheck_agent_image_tag: "{{ netcheck_version }}"
# netcheck_server_image_repo: "{{ docker_image_repo }}/mirantis/k8s-netchecker-server"
# netcheck_server_image_tag: "{{ netcheck_version }}"
# netcheck_etcd_image_tag: "v3.5.6"
# - name: helm
# install_by_default: false
# target: helm_enabled
# params:
# helm_version: "v3.7.1"
- name: metrics_server
target: metrics_server_enabled
lifecycle:
install_by_default: true
check:
shell: "kubectl get deployments -n kube-system metrics-server -o json"
keyword: "k8s.gcr.io/metrics-server/metrics-server"
install_addon_tags:
- download
- upgrade
- metrics_server
remove_addon_tags:
- upgrade
- metrics_server
downloads:
- metrics_server
params:
metrics_server_version: "v0.6.2"
# - name: cephfs_provisioner
# install_by_default: false
# target: cephfs_provisioner_enabled
# params:
# csi_attacher_image_repo: "{{ kube_image_repo }}/sig-storage/csi-attacher"
# csi_attacher_image_tag: "v3.3.0"
# csi_provisioner_image_repo: "{{ kube_image_repo }}/sig-storage/csi-provisioner"
# csi_provisioner_image_tag: "v3.0.0"
# csi_snapshotter_image_repo: "{{ kube_image_repo }}/sig-storage/csi-snapshotter"
# csi_snapshotter_image_tag: "v4.2.1"
# csi_resizer_image_repo: "{{ kube_image_repo }}/sig-storage/csi-resizer"
# csi_resizer_image_tag: "v1.3.0"
# csi_node_driver_registrar_image_repo: "{{ kube_image_repo }}/sig-storage/csi-node-driver-registrar"
# csi_node_driver_registrar_image_tag: "v2.4.0"
# csi_livenessprobe_image_repo: "{{ kube_image_repo }}/sig-storage/livenessprobe"
# csi_livenessprobe_image_tag: "v2.5.0"
# - name: local_path_provisioner
# install_by_default: false
# target: local_path_provisioner_enabled
# params:
# local_path_provisioner_image_tag: "v0.0.19"