Marco Chiappero
6012f480b0
It should be possible to enable or disable the environment variable LISTEN_ALL_INTERFACE in the Ironic configmap, as it allows to the way Ironic binds to socket, especially in combination with the changes introduced in v29. However, if listenOnAll is false, Ironic will bind to a specific IPv4 and/or IPv6 address and the 127.0.0.1 address used for the liveness and readiness probe will not be accepted. Also add a named template that, when it is set to false, picks a different host IP or address, according to the following priority: - ironicIP (deprecated) - provisioningIP - provisioningHostname Signed-off-by: Marco Chiappero <marco.chiappero@suse.com>
159 lines
4.2 KiB
YAML
159 lines
4.2 KiB
YAML
# Default values for ironic.
|
|
# This is a YAML-formatted file.
|
|
# Declare variables to be passed into your templates.
|
|
|
|
global:
|
|
# whether to enable dnsmasq on the provisioning network (for PXE boot)
|
|
enable_dnsmasq: false
|
|
|
|
# whether to enable PXE boot capability
|
|
# NOTE: enable_dnsmasq must set to 'true' in order for this option to be effective.
|
|
enable_pxe_boot: false
|
|
|
|
# DNS Policy of the Ironic pod
|
|
dnsPolicy: "ClusterFirstWithHostNet"
|
|
|
|
# IP address of the router associated with the specified DHCP
|
|
# address range
|
|
dnsmasqDefaultRouter: ""
|
|
|
|
# IP address of the dns server to be provided with DHCP
|
|
# response
|
|
dnsmasqDNSServer: ""
|
|
|
|
# specify comma-delimited xrange of IP addresses the DHCP server will manage.
|
|
# e.g 192.168.20.20,192.168.20.80
|
|
dhcpRange: ""
|
|
|
|
# Network interface on which provisioning network can be accessed
|
|
# Note this must be a dedicated NIC separate from the controlplane network
|
|
provisioningInterface: ""
|
|
|
|
# IP Address assigned to network interface on provisioning network
|
|
provisioningIP: ""
|
|
|
|
# Fully Qualified Domain Name used by Ironic for both binding (to the
|
|
# associated IPv4 and/or IPv6 addresses) and exposing the API, dnsmask and
|
|
# media, also used by BMO. Note, this is the only way to enable a fully
|
|
# working dual-stack configuration.
|
|
provisioningHostname: ""
|
|
|
|
# Whether the NIC names should be predictable or not
|
|
predictableNicNames: "true"
|
|
|
|
# The kernel params for Ironic
|
|
ironicKernelParams: "console=ttyS0"
|
|
|
|
databaseServiceName: "metal3-mariadb"
|
|
|
|
# In a multi-node kubernetes cluster, we need to "pin" the
|
|
# ironic containers to the given host where the
|
|
# provisioningIP exists. Uncomment the nodeSelector
|
|
# here and update the hostname accordingly.
|
|
#nodeSelector:
|
|
#kubernetes.io/hostname: "csrancher-n1"
|
|
|
|
# Comment this out when pinning the pdns containers to a specfic host.
|
|
nodeSelector: {}
|
|
|
|
replicaCount: 1
|
|
|
|
listenOnAll: true
|
|
|
|
images:
|
|
ironic:
|
|
repository: registry.opensuse.org/isv/suse/edge/metal3/containers/images/ironic
|
|
pullPolicy: IfNotPresent
|
|
tag: 29.0.4.0
|
|
ironicIPADownloader:
|
|
repository: registry.opensuse.org/isv/suse/edge/metal3/containers/images/ironic-ipa-downloader
|
|
pullPolicy: IfNotPresent
|
|
tag: 3.0.8
|
|
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
serviceAccount:
|
|
# Specifies whether a service account should be created
|
|
create: true
|
|
# Annotations to add to the service account
|
|
annotations: {}
|
|
# The name of the service account to use.
|
|
# If not set and create is true, a name is generated using the fullname template
|
|
name: ""
|
|
|
|
podAnnotations: {}
|
|
|
|
podSecurityContext:
|
|
runAsUser: 10475
|
|
fsGroup: 10475
|
|
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
runAsNonRoot: true
|
|
|
|
service:
|
|
type: LoadBalancer
|
|
annotations: {}
|
|
externalIPs: []
|
|
ports:
|
|
- name: httpd
|
|
port: 6180
|
|
protocol: TCP
|
|
targetPort: 6180
|
|
- name: httpd-tls
|
|
port: 6185
|
|
protocol: TCP
|
|
targetPort: 6185
|
|
- name: api
|
|
port: 6385
|
|
protocol: TCP
|
|
targetPort: 6385
|
|
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
|
|
tolerations: []
|
|
|
|
affinity: {}
|
|
|
|
baremetaloperator:
|
|
cloudflareApiToken: "foo"
|
|
ironichostNetwork: true
|
|
|
|
debug:
|
|
ironicRamdiskSshKey: ""
|
|
|
|
tlscerts:
|
|
cacert: ""
|
|
key: ""
|
|
crt: ""
|
|
|
|
persistence:
|
|
ironic:
|
|
# storageClass for the ironic shared volume
|
|
# Ensure the storageClass is defined
|
|
storageClass: ""
|
|
# size of the ironic shared volume e.g "1Gi"
|
|
# When unset persistent storage is disabled and emptyDir is enabled
|
|
size: ""
|
|
# accessMode of the ironic shared volume PVC
|
|
# If empty defaults to ReadWriteOnce when replicaCount=1 otherwise ReadWriteMany
|
|
accessMode: ""
|
|
# flag to indicate to keep pvc upon helm uninstall
|
|
keep: false
|