forked from openshift/ibm-roks-toolkit
-
Notifications
You must be signed in to change notification settings - Fork 0
/
cluster.yaml.example
149 lines (149 loc) · 6.86 KB
/
cluster.yaml.example
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
namespace: hosted
externalAPIDNSName: api.hosted.example.com
externalAPIPort: 6443
externalAPIAddress: 10.0.0.1
externalVPNDNSName: vpn.hosted.example.com
externalVPNPort: 3118
externalOauthPort: 4000
serviceCIDR: 172.31.0.0/16
namedCerts:
- namedCertPrefix: /etc/kubernetes/secret/cert1
namedCertDomain: c1.hosted.example.com
- namedCertPrefix: /etc/kubernetes/secret/cert2
namedCertDomain: c2.hosted.example.com
podCIDR: 10.32.0.0/14
releaseImage: quay.io/openshift-release-dev/ocp-release:4.2.0
originReleasePrefix: quay.io/openshift-release-dev
apiNodePort: 32323
openVPNNodePort: 32324
endpointPublishingStrategyScope: External
ingressSubdomain: apps.hosted.example.com
openshiftAPIClusterIP: 172.30.0.20
baseDomain: example.com
networkType: OpenShiftSDN
replicas: 1
etcdClientName: etcd-client
openshiftAPIServerCABundle: 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
identityProviders: |
- challenge: true
login: true
mappingMethod: lookup
name: IAM
provider:
apiVersion: osin.config.openshift.io/v1
ca: ''
claims:
email:
- email
id:
- iam_id
name:
- name
preferredUsername:
- preferred_username
clientID: clientid
clientSecret:
env: ''
file: "/etc/oauth-openshift-secrets/clientSecret"
keyFile: ''
value: ''
extraAuthorizeParameters:
extraScopes:
kind: OpenIDIdentityProvider
urls:
authorize: https://iam.test.cloud.ibm.com/identity/authorize
token: https://iam.test.cloud.ibm.com/identity/token
userInfo: https://iam.test.cloud.ibm.com/identity/userinfo
cloudProvider: ''
cvoSetupImage: "quay.io/csrwng/origin-cluster-version-operator:hosted"
internalAPIPort: 6443
routerServiceType: LoadBalancer
platformType: IBMCloud
kubeAPIServerResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
openshiftControllerManagerResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
clusterVersionOperatorResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
kubeControllerManagerResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
openshiftAPIServerResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
kubeSchedulerResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
controlPlaneOperatorResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
oAuthServerResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
clusterPolicyControllerResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
autoApproverResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
kmsServerResources:
- resourceRequest:
- cpu: 100m
memory: 100Mi
- resourceLimit:
- cpu: 200m
memory: 200Mi
kmsImage: example.image:v1.0.0
kmsAPIKey: abcdefghijklmnopqrstuvwxyz
kpInfo: '{"example":"foobar"}'
kpRegion: us-south
apiServerAuditEnabled: true
restartDate: "2017-07-27T16:39:00Z"
extraFeatureGates: [ExpandInUsePersistentVolumes=true]
apiserverLivenessPath: livez?exclude=etcd
controlPlaneOperatorImage: registry.svc.ci.openshift.org/ibm-roks/ibm-roks-4.4:control-plane-operator
controlPlaneOperatorSecurity: 1001
masterPriorityClass: ''