clusterConfig: manifests: https://git.oceanbox.io/oceanbox/manifests.git cilium: enabled: false env: "prod" distro: "nixos" domain: "adm.vtn.obx" initca: "/var/lib/kubernetes/secrets" apiserver: "rossby-manage" apiserverip: "172.16.239.221" etcd_nodes: ["172.16.239.221, 172.16.239.222, 172.16.239.210"] k8s_nodes: [ "172.16.239.221, 172.16.239.222, 172.16.239.210, 172.16.239.111, 172.16.239.112, 172.16.239.113, 172.16.239.114, 172.16.239.115, 172.16.239.116, 172.16.239.117, 172.16.239.118, 172.16.239.119, 172.16.239.120, 172.16.239.121, 172.16.239.122, 172.16.239.123, 172.16.239.124, 172.16.239.125, 172.16.239.126, 172.16.239.127, 172.16.239.128, 172.16.239.129, 172.16.239.130", ] cluster: "rossby" ingress_nodes: ["rossby, rossby-manage"] ingress_replica_count: 2 ingress_clusterissuer: ca-issuer ingress_whitelist: - 0.0.0.0/0 ingress_hostnetwork: true ingress_hostport: false ingress_nodeport: false fileserver: "172.16.239.222" nodes: - name: rossby-manage taints: [] labels: - "node-role.kubernetes.io=control-plane" - name: rossby taints: [] labels: - "node-role.kubernetes.io=control-plane" - name: fs-work # taints: # - "workload=data:NoSchedule" labels: - "node-role.kubernetes.io=control-plane" - "nfs=work" - "nfs=data" - name: c0-1 taints: - "workload=compute:NoSchedule" - name: c0-2 taints: - "workload=compute:NoSchedule" - name: c0-3 taints: - "workload=compute:NoSchedule" - name: c0-4 taints: - "workload=compute:NoSchedule" - name: c0-5 taints: - "workload=compute:NoSchedule" - name: c0-6 taints: - "workload=compute:NoSchedule" - name: c0-7 taints: - "workload=compute:NoSchedule" - name: c0-8 taints: - "workload=compute:NoSchedule" - name: c0-9 taints: - "workload=compute:NoSchedule" - name: c0-10 taints: - "workload=compute:NoSchedule" - name: c0-11 taints: - "workload=compute:NoSchedule" - name: c0-12 taints: - "workload=compute:NoSchedule" - name: c0-13 taints: - "workload=compute:NoSchedule" - name: c0-14 taints: - "workload=compute:NoSchedule" - name: c0-15 taints: - "workload=compute:NoSchedule" - name: c0-16 taints: - "workload=compute:NoSchedule" - name: c0-17 taints: - "workload=compute:NoSchedule" - name: c0-18 taints: - "workload=compute:NoSchedule" - name: c0-19 taints: - "workload=compute:NoSchedule" - name: c0-20 taints: - "workload=compute:NoSchedule" # TODO(mrtz): Move to values/*/helmfile.yaml # argocd: # adminLogin: false # additional_rbac_settings: # - g, "eb17a659-4ce6-41bc-9153-d9b117c44479", role:org-admin # linkerd: # trustAnchorPEM: | # -----BEGIN CERTIFICATE----- # MIIBtDCCAVqgAwIBAgIQRlhbOLj9zw+QTGHqbOBaozAKBggqhkjOPQQDAjAlMSMw # IQYDVQQDExpyb290LmxpbmtlcmQuY2x1c3Rlci5sb2NhbDAeFw0yMTA0MDkxNDAy # NTFaFw0zMTA0MDcxNDAyNTFaMCUxIzAhBgNVBAMTGnJvb3QubGlua2VyZC5jbHVz # dGVyLmxvY2FsMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEljOLtSPSi6XIEdFP # VCGa4BKoQ0X5dBSZvHRLt/IzHRzAbIVIjgjvyRQc7EQlRKvZ8P9um/WG1ypyyA2l # C9MWz6NsMGowDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwHQYD # VR0OBBYEFHz4UuVKCNX8/hsZCcdTlmWnSCGXMCUGA1UdEQQeMByCGnJvb3QubGlu # a2VyZC5jbHVzdGVyLmxvY2FsMAoGCCqGSM49BAMCA0gAMEUCIGAiz3yNhboVdze1 # sNFcFL2GF5WwW9z53u03UkPkiuBTAiEA4ZHWZJVGV5VAQArL5v32HeH/IjC1ssGl # 7Y8D0rQqkis= # -----END CERTIFICATE----- # webhookPEM: | # -----BEGIN CERTIFICATE----- # MIIBlDCCATqgAwIBAgIRAP9aY0pRwkDnXqi3FwKmfZowCgYIKoZIzj0EAwIwKDEm # MCQGA1UEAxMdd2ViaG9vay5saW5rZXJkLmNsdXN0ZXIubG9jYWwwHhcNMjIxMDI3 # MDUxNTE0WhcNMjQxMDI1MDkxNTE0WjAoMSYwJAYDVQQDEx13ZWJob29rLmxpbmtl # cmQuY2x1c3Rlci5sb2NhbDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABIGSt6Th # 62wgjM5dRbZLa9YwPQAm/T2QnTzzrAUm+GeqvKfBhpPMGX6+91/x20X0uV26LvKz # YV1wVMs7tuPZioijRTBDMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/ # AgEBMB0GA1UdDgQWBBQWV6+eqRWOPyLWz9s0HT96MOr01zAKBggqhkjOPQQDAgNI # ADBFAiBTBFuIJUBEI5T2unrnFhM+Bj0rZFfuxQqEwD6+z2YRzwIhAOINkH5u7Z8M # zIVl06Biq2N+MO4TJ+CSS1C1w/22CDru # -----END CERTIFICATE----- # multicluster: # enabled: false # prometheus: # version: 39.6.0 # snitchUrl: "https://nosnch.in/bceb803932" # nfs_provisioner: # version: 4.0.17 # cert_manager: # version: 1.9.1 # gitlab_runner: # enabled: false # velero: # enabled: false # kyverno: # enabled: true # nginx: # version: 4.12.1