2020-08-12 18:08:12 +00:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# The IPv4 cidr pool to create on startup if none exists. Pod IPs will be
|
|
|
|
|
# chosen from this range.
|
|
|
|
|
podCidr: "10.42.0.0/16"
|
|
|
|
|
|
|
|
|
|
flannel:
|
|
|
|
|
# kube-flannel image
|
2020-08-21 18:56:13 +00:00
|
|
|
image:
|
2020-09-12 02:31:33 +00:00
|
|
|
repository: rancher/hardened-flannel
|
2021-02-24 19:53:23 +00:00
|
|
|
tag: v0.13.0-rancher1-build20210223
|
2020-08-12 18:08:12 +00:00
|
|
|
# The interface used by canal for host <-> host communication.
|
|
|
|
|
# If left blank, then the interface is chosen using the node's
|
|
|
|
|
# default route.
|
|
|
|
|
iface: ""
|
|
|
|
|
# kube-flannel command arguments
|
|
|
|
|
args:
|
|
|
|
|
- "--ip-masq"
|
|
|
|
|
- "--kube-subnet-mgr"
|
|
|
|
|
# Backend for kube-flannel. Backend should not be changed
|
|
|
|
|
# at runtime.
|
|
|
|
|
backend: "vxlan"
|
|
|
|
|
|
|
|
|
|
calico:
|
|
|
|
|
# CNI installation image.
|
2020-08-21 18:56:13 +00:00
|
|
|
cniImage:
|
2020-09-12 02:31:33 +00:00
|
|
|
repository: rancher/hardened-calico
|
2021-02-24 19:53:23 +00:00
|
|
|
tag: v3.13.3-build20210223
|
2020-08-12 18:08:12 +00:00
|
|
|
# Canal node image.
|
2020-08-21 18:56:13 +00:00
|
|
|
nodeImage:
|
2020-09-12 02:31:33 +00:00
|
|
|
repository: rancher/hardened-calico
|
2021-02-24 19:53:23 +00:00
|
|
|
tag: v3.13.3-build20210223
|
2020-08-12 18:08:12 +00:00
|
|
|
# Flexvol Image.
|
2020-08-21 18:56:13 +00:00
|
|
|
flexvolImage:
|
2020-09-12 02:31:33 +00:00
|
|
|
repository: rancher/hardened-calico
|
2021-02-24 19:53:23 +00:00
|
|
|
tag: v3.13.3-build20210223
|
2020-08-12 18:08:12 +00:00
|
|
|
# Datastore type for canal. It can be either kuberentes or etcd.
|
|
|
|
|
datastoreType: kubernetes
|
|
|
|
|
# Wait for datastore to initialize.
|
|
|
|
|
waitForDatastore: true
|
|
|
|
|
# Configure route aggregation based on pod CIDR.
|
|
|
|
|
usePodCIDR: true
|
|
|
|
|
# Disable BGP routing.
|
|
|
|
|
networkingBackend: none
|
|
|
|
|
# Cluster type to identify the deployment type.
|
|
|
|
|
clusterType: "k8s,canal"
|
|
|
|
|
# Disable file logging so `kubectl logs` works.
|
|
|
|
|
disableFileLogging: true
|
|
|
|
|
# Disable IPv6 on Kubernetes.
|
|
|
|
|
felixIpv6Support: false
|
|
|
|
|
# Period, in seconds, at which felix re-applies all iptables state
|
|
|
|
|
felixIptablesRefreshInterval: 60
|
2020-08-25 22:36:24 +00:00
|
|
|
# iptables backend to use for felix, defaults to auto but can also be set to nft or legacy
|
|
|
|
|
felixIptablesBackend: auto
|
2020-08-12 18:08:12 +00:00
|
|
|
# Set Felix logging to "info".
|
|
|
|
|
felixLogSeverityScreen: info
|
|
|
|
|
# Enable felix healthcheck.
|
|
|
|
|
felixHealthEnabled: true
|
2020-08-19 17:07:58 +00:00
|
|
|
# Enable prometheus metrics
|
|
|
|
|
felixPrometheusMetricsEnabled: true
|
2020-08-26 23:20:52 +00:00
|
|
|
# Disable XDP Acceleration as we do not support it with our ubi7 base image
|
|
|
|
|
felixXDPEnabled: false
|
2020-08-12 18:08:12 +00:00
|
|
|
# Whether or not to masquerade traffic to destinations not within
|
|
|
|
|
# the pod network.
|
|
|
|
|
masquerade: true
|
|
|
|
|
# Set Felix endpoint to host default action to ACCEPT.
|
|
|
|
|
felixDefaultEndpointToHostAction: ACCEPT
|
|
|
|
|
# Configure the MTU to use.
|
|
|
|
|
vethuMTU: 1450
|
|
|
|
|
# Typha is disabled.
|
|
|
|
|
typhaServiceName: none
|
2020-08-21 18:56:13 +00:00
|
|
|
|
|
|
|
|
global:
|
|
|
|
|
systemDefaultRegistry: ""
|
