2018-07-21 00:58:09 +02:00
|
|
|
---
|
2018-09-18 04:00:12 +02:00
|
|
|
initial_master: master1
|
2018-09-26 19:24:36 +02:00
|
|
|
tinc_primary_router: proxy1
|
|
|
|
|
vpn_interface: tun0
|
2018-07-27 21:22:52 +02:00
|
|
|
|
2018-08-01 11:10:51 +02:00
|
|
|
k8s_release: "1.10.6"
|
2018-07-21 00:58:09 +02:00
|
|
|
k8s_apiserver_secure_port: "6443"
|
|
|
|
|
k8s_ca_conf_directory: "{{ '~/k8s/certs' | expanduser }}"
|
|
|
|
|
k8s_config_directory: "{{ '~/k8s/configs' | expanduser }}"
|
2018-08-02 23:18:47 +02:00
|
|
|
k8s_ca_certificate_owner: "{{ harden_linux_deploy_user }}"
|
2018-07-21 00:58:09 +02:00
|
|
|
k8s_ca_certificate_group: "root"
|
|
|
|
|
k8s_config_cluster_name: banditlair.com
|
|
|
|
|
k8s_encryption_config_directory: "{{k8s_config_directory}}"
|
2018-07-22 23:10:38 +02:00
|
|
|
k8s_interface: "{{peervpn_conf_interface}}"
|
2018-08-01 11:10:51 +02:00
|
|
|
k8s_conf_dir: /etc/kubernetes
|
2018-07-26 00:12:17 +02:00
|
|
|
|
2018-09-20 01:14:41 +02:00
|
|
|
etcd_version: "3.2.24"
|
2018-07-26 00:12:17 +02:00
|
|
|
|
2018-07-23 00:46:10 +02:00
|
|
|
harden_linux_root_password: "{{k8s_scaleway_root_password}}"
|
|
|
|
|
harden_linux_deploy_user: deploy
|
|
|
|
|
harden_linux_deploy_user_password: "{{k8s_scaleway_deploy_user_password}}"
|
|
|
|
|
harden_linux_deploy_user_home: /home/deploy
|
|
|
|
|
harden_linux_ufw_defaults_user:
|
|
|
|
|
"^DEFAULT_FORWARD_POLICY": 'DEFAULT_FORWARD_POLICY="ACCEPT"'
|
2018-07-31 01:47:35 +02:00
|
|
|
harden_linux_deploy_user_public_keys: "{{ scw_authorized_keys }}"
|
2018-07-23 00:46:10 +02:00
|
|
|
harden_linux_ufw_allow_networks:
|
|
|
|
|
- "10.0.0.0/8"
|
|
|
|
|
- "172.16.0.0/12"
|
|
|
|
|
- "192.168.0.0/16"
|
|
|
|
|
harden_linux_sysctl_settings_user:
|
|
|
|
|
"net.ipv4.ip_forward": 1
|
|
|
|
|
"net.ipv6.conf.default.forwarding": 1
|
|
|
|
|
"net.ipv6.conf.all.forwarding": 1
|
|
|
|
|
harden_linux_ufw_logging: 'on'
|
|
|
|
|
harden_linux_sshguard_whitelist:
|
|
|
|
|
- "127.0.0.0/8"
|
|
|
|
|
- "::1/128"
|
|
|
|
|
- "212.83.165.111"
|
|
|
|
|
- "10.3.0.0/24"
|
|
|
|
|
- "10.200.0.0/16"
|
|
|
|
|
|
