Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 1 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 2 | # you may not use this file except in compliance with the License. |
| 3 | # You may obtain a copy of the License at |
| 4 | # |
| 5 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 6 | # |
| 7 | # Unless required by applicable law or agreed to in writing, software |
| 8 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 9 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 10 | # See the License for the specific language governing permissions and |
| 11 | # limitations under the License. |
| 12 | |
| 13 | # Default values for libvirt. |
| 14 | # This is a YAML-formatted file. |
| 15 | # Declare name/value pairs to be passed into your templates. |
| 16 | # name: value |
| 17 | |
| 18 | --- |
| 19 | release_group: null |
| 20 | |
| 21 | labels: |
| 22 | agent: |
| 23 | libvirt: |
| 24 | node_selector_key: openstack-compute-node |
| 25 | node_selector_value: enabled |
| 26 | |
| 27 | images: |
| 28 | tags: |
okozachenko1203 | d2cd687 | 2023-08-31 19:53:51 +1000 | [diff] [blame] | 29 | libvirt: docker.io/openstackhelm/libvirt:latest-ubuntu_focal |
Mohammed Naser | 168acc3 | 2024-01-09 17:15:26 -0500 | [diff] [blame] | 30 | libvirt_tls_sidecar: ghcr.io/vexxhost/atmosphere/libvirt-tls-sidecar:latest |
okozachenko1203 | d2cd687 | 2023-08-31 19:53:51 +1000 | [diff] [blame] | 31 | libvirt_exporter: vexxhost/libvirtd-exporter:latest |
Rico Lin | c6ac7a1 | 2023-11-03 00:25:40 +0800 | [diff] [blame] | 32 | ceph_config_helper: 'docker.io/openstackhelm/ceph-config-helper:ubuntu_focal_18.2.0-1-20231013' |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 33 | dep_check: quay.io/airshipit/kubernetes-entrypoint:v1.0.0 |
| 34 | image_repo_sync: docker.io/library/docker:17.07.0 |
okozachenko1203 | d2cd687 | 2023-08-31 19:53:51 +1000 | [diff] [blame] | 35 | kubectl: docker.io/bitnami/kubectl:latest |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 36 | pull_policy: "IfNotPresent" |
| 37 | local_registry: |
| 38 | active: false |
| 39 | exclude: |
| 40 | - dep_check |
| 41 | - image_repo_sync |
| 42 | |
| 43 | network: |
| 44 | # provide what type of network wiring will be used |
| 45 | # possible options: openvswitch, linuxbridge, sriov |
| 46 | backend: |
| 47 | - openvswitch |
| 48 | |
| 49 | endpoints: |
| 50 | cluster_domain_suffix: cluster.local |
| 51 | local_image_registry: |
| 52 | name: docker-registry |
| 53 | namespace: docker-registry |
| 54 | hosts: |
| 55 | default: localhost |
| 56 | internal: docker-registry |
| 57 | node: localhost |
| 58 | host_fqdn_override: |
| 59 | default: null |
| 60 | port: |
| 61 | registry: |
| 62 | node: 5000 |
okozachenko1203 | d2cd687 | 2023-08-31 19:53:51 +1000 | [diff] [blame] | 63 | oci_image_registry: |
| 64 | name: oci-image-registry |
| 65 | namespace: oci-image-registry |
| 66 | auth: |
| 67 | enabled: false |
| 68 | libvirt: |
| 69 | username: libvirt |
| 70 | password: password |
| 71 | hosts: |
| 72 | default: localhost |
| 73 | host_fqdn_override: |
| 74 | default: null |
| 75 | port: |
| 76 | registry: |
| 77 | default: null |
| 78 | libvirt_exporter: |
| 79 | port: |
| 80 | metrics: |
| 81 | default: 9474 |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 82 | |
| 83 | network_policy: |
| 84 | libvirt: |
| 85 | ingress: |
| 86 | - {} |
| 87 | egress: |
| 88 | - {} |
| 89 | |
| 90 | ceph_client: |
| 91 | configmap: ceph-etc |
| 92 | user_secret_name: pvc-ceph-client-key |
| 93 | |
okozachenko1203 | fbca509 | 2023-09-01 02:11:37 +1000 | [diff] [blame] | 94 | # Issuers for TLS certificates |
| 95 | issuers: |
| 96 | # Issuer to issue a certificate for libvirt api when listen_tls is enabled |
| 97 | libvirt: |
| 98 | kind: ClusterIssuer |
| 99 | name: ca-clusterissuer |
| 100 | # Issuer to issue a certificate for vencrypt |
| 101 | vencrypt: |
| 102 | kind: ClusterIssuer |
| 103 | name: ca-clusterissuer |
| 104 | |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 105 | conf: |
| 106 | ceph: |
| 107 | enabled: true |
| 108 | admin_keyring: null |
| 109 | cinder: |
| 110 | user: "cinder" |
| 111 | keyring: null |
| 112 | secret_uuid: 457eb676-33da-42ec-9a8c-9293d545c337 |
| 113 | # Cinder Ceph backend that is not configured by the k8s cluter |
| 114 | external_ceph: |
| 115 | enabled: false |
| 116 | user: null |
| 117 | secret_uuid: null |
| 118 | user_secret_name: null |
| 119 | libvirt: |
| 120 | listen_tcp: "1" |
| 121 | listen_tls: "0" |
| 122 | auth_tcp: "none" |
| 123 | ca_file: "/etc/pki/CA/cacert.pem" |
| 124 | cert_file: "/etc/pki/libvirt/servercert.pem" |
| 125 | key_file: "/etc/pki/libvirt/private/serverkey.pem" |
| 126 | auth_unix_rw: "none" |
| 127 | listen_addr: 127.0.0.1 |
| 128 | log_level: "3" |
| 129 | log_outputs: "1:file:/var/log/libvirt/libvirtd.log" |
| 130 | qemu: |
okozachenko1203 | d2cd687 | 2023-08-31 19:53:51 +1000 | [diff] [blame] | 131 | vnc_tls: "0" |
| 132 | vnc_tls_x509_verify: "0" |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 133 | stdio_handler: "file" |
| 134 | user: "nova" |
| 135 | group: "kvm" |
okozachenko1203 | fbca509 | 2023-09-01 02:11:37 +1000 | [diff] [blame] | 136 | default_tls_x509_cert_dir: /etc/pki/qemu |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 137 | kubernetes: |
okozachenko1203 | d2cd687 | 2023-08-31 19:53:51 +1000 | [diff] [blame] | 138 | cgroup: "kubepods.slice" |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 139 | |
| 140 | pod: |
| 141 | probes: |
| 142 | libvirt: |
| 143 | libvirt: |
| 144 | liveness: |
| 145 | enabled: true |
| 146 | params: |
| 147 | initialDelaySeconds: 30 |
| 148 | periodSeconds: 60 |
| 149 | timeoutSeconds: 5 |
| 150 | readiness: |
| 151 | enabled: true |
| 152 | params: |
| 153 | initialDelaySeconds: 15 |
| 154 | periodSeconds: 60 |
| 155 | timeoutSeconds: 5 |
| 156 | security_context: |
| 157 | libvirt: |
| 158 | pod: |
| 159 | runAsUser: 0 |
| 160 | container: |
| 161 | ceph_admin_keyring_placement: |
| 162 | readOnlyRootFilesystem: false |
| 163 | ceph_keyring_placement: |
| 164 | readOnlyRootFilesystem: false |
| 165 | libvirt: |
| 166 | privileged: true |
| 167 | readOnlyRootFilesystem: false |
okozachenko1203 | d2cd687 | 2023-08-31 19:53:51 +1000 | [diff] [blame] | 168 | libvirt_exporter: |
| 169 | privileged: true |
| 170 | sidecars: |
| 171 | libvirt_exporter: false |
| 172 | |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 173 | affinity: |
| 174 | anti: |
| 175 | type: |
| 176 | default: preferredDuringSchedulingIgnoredDuringExecution |
| 177 | topologyKey: |
| 178 | default: kubernetes.io/hostname |
| 179 | weight: |
| 180 | default: 10 |
okozachenko1203 | d2cd687 | 2023-08-31 19:53:51 +1000 | [diff] [blame] | 181 | tolerations: |
| 182 | libvirt: |
| 183 | enabled: false |
| 184 | tolerations: |
| 185 | - key: node-role.kubernetes.io/master |
| 186 | operator: Exists |
| 187 | effect: NoSchedule |
| 188 | - key: node-role.kubernetes.io/control-plane |
| 189 | operator: Exists |
| 190 | effect: NoSchedule |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 191 | dns_policy: "ClusterFirstWithHostNet" |
| 192 | mounts: |
| 193 | libvirt: |
| 194 | init_container: null |
| 195 | libvirt: |
| 196 | lifecycle: |
| 197 | upgrades: |
| 198 | daemonsets: |
| 199 | pod_replacement_strategy: RollingUpdate |
| 200 | libvirt: |
| 201 | enabled: true |
| 202 | min_ready_seconds: 0 |
| 203 | max_unavailable: 1 |
| 204 | resources: |
| 205 | enabled: false |
| 206 | libvirt: |
| 207 | requests: |
| 208 | memory: "128Mi" |
| 209 | cpu: "100m" |
| 210 | limits: |
| 211 | memory: "1024Mi" |
| 212 | cpu: "2000m" |
| 213 | jobs: |
| 214 | image_repo_sync: |
| 215 | requests: |
| 216 | memory: "128Mi" |
| 217 | cpu: "100m" |
| 218 | limits: |
| 219 | memory: "1024Mi" |
| 220 | cpu: "2000m" |
okozachenko1203 | d2cd687 | 2023-08-31 19:53:51 +1000 | [diff] [blame] | 221 | libvirt_exporter: |
| 222 | requests: |
| 223 | memory: "128Mi" |
| 224 | cpu: "100m" |
| 225 | limits: |
| 226 | memory: "256Mi" |
| 227 | cpu: "500m" |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 228 | |
| 229 | dependencies: |
| 230 | dynamic: |
| 231 | common: |
| 232 | local_image_registry: |
| 233 | jobs: |
| 234 | - libvirt-image-repo-sync |
| 235 | services: |
| 236 | - endpoint: node |
| 237 | service: local_image_registry |
| 238 | targeted: |
Mohammed Naser | d6db245 | 2023-07-23 14:34:59 +0000 | [diff] [blame] | 239 | ovn: |
| 240 | libvirt: |
| 241 | pod: |
| 242 | - requireSameNode: true |
| 243 | labels: |
| 244 | application: ovn |
| 245 | component: ovn-controller |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 246 | openvswitch: |
| 247 | libvirt: |
| 248 | pod: |
| 249 | - requireSameNode: true |
| 250 | labels: |
| 251 | application: neutron |
| 252 | component: neutron-ovs-agent |
| 253 | linuxbridge: |
| 254 | libvirt: |
| 255 | pod: |
| 256 | - requireSameNode: true |
| 257 | labels: |
| 258 | application: neutron |
| 259 | component: neutron-lb-agent |
| 260 | sriov: |
| 261 | libvirt: |
| 262 | pod: |
| 263 | - requireSameNode: true |
| 264 | labels: |
| 265 | application: neutron |
| 266 | component: neutron-sriov-agent |
| 267 | static: |
| 268 | libvirt: |
| 269 | services: null |
| 270 | image_repo_sync: |
| 271 | services: |
| 272 | - endpoint: internal |
| 273 | service: local_image_registry |
| 274 | |
| 275 | manifests: |
| 276 | configmap_bin: true |
| 277 | configmap_etc: true |
| 278 | daemonset_libvirt: true |
| 279 | job_image_repo_sync: true |
| 280 | network_policy: false |
okozachenko1203 | d2cd687 | 2023-08-31 19:53:51 +1000 | [diff] [blame] | 281 | role_cert_manager: false |
| 282 | secret_registry: true |
| 283 | |
| 284 | secrets: |
| 285 | oci_image_registry: |
| 286 | libvirt: libvirt-oci-image-registry-key |
| 287 | tls: |
| 288 | server: libvirt-tls-server |
| 289 | client: libvirt-tls-client |
Rico Lin | c6ac7a1 | 2023-11-03 00:25:40 +0800 | [diff] [blame] | 290 | |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 291 | ... |