Add Aether cluster and app configs
Change-Id: I1394ca5690267e930bc74eb2602c0473c8d60c1b
diff --git a/deployment-configs/aether/clusters/production-central.yml b/deployment-configs/aether/clusters/production-central.yml
new file mode 100644
index 0000000..243dee1
--- /dev/null
+++ b/deployment-configs/aether/clusters/production-central.yml
@@ -0,0 +1,111 @@
+name: production-central
+rancher_kubernetes_engine_config:
+ authentication:
+ strategy: x509
+ cloud_provider:
+ name: gce
+ customCloudProvider: |-
+ [global]
+ project-id = m-cord
+ network-project-id = onf-vpn
+ network-name = default
+ subnetwork-name = default
+ regional = true
+ multizone = true
+ ignore_docker_version: true
+ ingress:
+ provider: nginx
+ kubernetes_version: v1.15.6-rancher1-2
+ monitoring:
+ provider: none
+ network:
+ options:
+ calico_cloud_provider: gce
+ plugin: calico
+ services:
+ etcd:
+ backup_config:
+ enabled: true
+ interval_hours: 12
+ retention: 6
+ safe_timestamp: false
+ creation: 12h
+ extra_args:
+ election-timeout: 5000
+ heartbeat-interval: 500
+ gid: 0
+ retention: 72h
+ snapshot: false
+ uid: 0
+ kube_api:
+ always_pull_images: false
+ pod_security_policy: false
+ service_node_port_range: 2000-36767
+ service_cluster_ip_range: 10.52.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubelet:
+ cluster_domain: product.central
+ cluster_dns_server: 10.52.128.10
+ fail_swap_on: false
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kube-controller:
+ cluster_cidr: 10.52.0.0/17
+ service_cluster_ip_range: 10.52.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ scheduler:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubeproxy:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ ssh_agent_auth: false
+ addon_job_timeout: 30
+ addons: |-
+ ---
+ apiVersion: storage.k8s.io/v1
+ kind: StorageClass
+ metadata:
+ name: zonal-ssd
+ provisioner: kubernetes.io/gce-pd
+ parameters:
+ type: pd-ssd
+ ---
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ namespace: kube-system
+ name: coredns
+ data:
+ Corefile: |
+ .:53 {
+ errors
+ health
+ kubernetes product.central in-addr.arpa ip6.arpa {
+ pods insecure
+ upstream
+ fallthrough in-addr.arpa ip6.arpa
+ ttl 30
+ }
+ prometheus :9153
+ forward . "/etc/resolv.conf"
+ cache 30
+ loop
+ reload
+ loadbalance
+ }
+ menlo.edge:53 {
+ errors
+ cache 30
+ forward . 10.53.128.10
+ }
+
+windows_prefered_cluster: false
+docker_root_dir: /var/lib/docker
+local_cluster_auth_endpoint:
+ enabled: true
+enable_network_policy: false
+enable_cluster_alerting: false
+enable_cluster_monitoring: false
diff --git a/deployment-configs/aether/clusters/production-edge-onf-menlo.yml b/deployment-configs/aether/clusters/production-edge-onf-menlo.yml
new file mode 100644
index 0000000..3a7bed9
--- /dev/null
+++ b/deployment-configs/aether/clusters/production-edge-onf-menlo.yml
@@ -0,0 +1,93 @@
+name: production-edge-onf-menlo
+rancher_kubernetes_engine_config:
+ authentication:
+ strategy: x509
+ ignore_docker_version: true
+ ingress:
+ provider: nginx
+ kubernetes_version: v1.15.6-rancher1-2
+ monitoring:
+ provider: none
+ network:
+ plugin: calico
+ services:
+ etcd:
+ backup_config:
+ enabled: true
+ interval_hours: 12
+ retention: 6
+ safe_timestamp: false
+ creation: 12h
+ extra_args:
+ election-timeout: 5000
+ heartbeat-interval: 500
+ gid: 0
+ retention: 72h
+ snapshot: false
+ uid: 0
+ kube_api:
+ always_pull_images: false
+ pod_security_policy: false
+ service_node_port_range: 2000-36767
+ service_cluster_ip_range: 10.53.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubelet:
+ cluster_domain: menlo.edge
+ cluster_dns_server: 10.53.128.10
+ fail_swap_on: false
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kube-controller:
+ cluster_cidr: 10.53.0.0/17
+ service_cluster_ip_range: 10.53.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ scheduler:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubeproxy:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ ssh_agent_auth: false
+ addon_job_timeout: 30
+ addons: |-
+ ---
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ namespace: kube-system
+ name: coredns
+ data:
+ Corefile: |
+ .:53 {
+ errors
+ health
+ kubernetes menlo.edge in-addr.arpa ip6.arpa {
+ pods insecure
+ upstream
+ fallthrough in-addr.arpa ip6.arpa
+ ttl 30
+ }
+ prometheus :9153
+ forward . "/etc/resolv.conf"
+ cache 30
+ loop
+ reload
+ loadbalance
+ }
+ product.central:53 {
+ errors
+ cache 30
+ forward . 10.52.128.10
+ }
+ addons_include:
+ - https://raw.githubusercontent.com/intel/multus-cni/master/images/multus-daemonset-pre-1.16.yml
+
+windows_prefered_cluster: false
+docker_root_dir: /var/lib/docker
+local_cluster_auth_endpoint:
+ enabled: true
+enable_network_policy: false
+enable_cluster_alerting: false
+enable_cluster_monitoring: false
diff --git a/deployment-configs/aether/clusters/production-global.yml b/deployment-configs/aether/clusters/production-global.yml
new file mode 100644
index 0000000..5b1a6bc
--- /dev/null
+++ b/deployment-configs/aether/clusters/production-global.yml
@@ -0,0 +1,128 @@
+name: production-global
+rancher_kubernetes_engine_config:
+ addon_job_timeout: 30
+ authentication:
+ strategy: x509
+ cloud_provider:
+ name: gce
+ customCloudProvider: |-
+ [global]
+ project-id = m-cord
+ network-project-id = onf-vpn
+ network-name = default
+ subnetwork-name = default
+ regional = true
+ multizone = true
+ ignore_docker_version: true
+ ingress:
+ provider: nginx
+ kubernetes_version: v1.15.6-rancher1-2
+ monitoring:
+ provider: none
+ network:
+ options:
+ calico_cloud_provider: gce
+ plugin: calico
+ services:
+ etcd:
+ backup_config:
+ enabled: true
+ interval_hours: 12
+ retention: 6
+ safe_timestamp: false
+ creation: 12h
+ extra_args:
+ election-timeout: 5000
+ heartbeat-interval: 500
+ gid: 0
+ retention: 72h
+ snapshot: false
+ uid: 0
+ kube_api:
+ always_pull_images: false
+ pod_security_policy: false
+ service_node_port_range: 2000-36767
+ service_cluster_ip_range: 10.45.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubelet:
+ cluster_domain: global
+ cluster_dns_server: 10.45.128.10
+ fail_swap_on: false
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kube-controller:
+ cluster_cidr: 10.45.0.0/17
+ service_cluster_ip_range: 10.45.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ scheduler:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubeproxy:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ ssh_agent_auth: false
+ addons: |-
+ ---
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ namespace: kube-system
+ name: coredns
+ data:
+ Corefile: |
+ .:53 {
+ errors
+ health
+ kubernetes global in-addr.arpa ip6.arpa {
+ pods insecure
+ upstream
+ fallthrough in-addr.arpa ip6.arpa
+ ttl 30
+ }
+ prometheus :9153
+ forward . "/etc/resolv.conf"
+ cache 30
+ loop
+ reload
+ loadbalance
+ }
+ product.central:53 {
+ errors
+ cache 30
+ forward . 10.52.128.10
+ }
+ staging.central:53 {
+ errors
+ cache 30
+ forward . 10.47.128.10
+ }
+ menlo.edge:53 {
+ errors
+ cache 30
+ forward . 10.53.128.10
+ }
+ a.staging.edge:53 {
+ errors
+ cache 30
+ forward . 10.48.128.10
+ }
+ b.staging.edge:53 {
+ errors
+ cache 30
+ forward . 10.49.128.10
+ }
+ c.staging.edge:53 {
+ errors
+ cache 30
+ forward . 10.50.128.10
+ }
+
+windows_prefered_cluster: false
+local_cluster_auth_endpoint:
+ enabled: true
+docker_root_dir: /var/lib/docker
+enable_cluster_alerting: false
+enable_cluster_monitoring: false
+enable_network_policy: false
diff --git a/deployment-configs/aether/clusters/rancher.yml b/deployment-configs/aether/clusters/rancher.yml
new file mode 100644
index 0000000..90e1b11
--- /dev/null
+++ b/deployment-configs/aether/clusters/rancher.yml
@@ -0,0 +1,32 @@
+cluster_name: aether-rancher
+kubernetes_version: "v1.15.6-rancher1-2"
+nodes:
+ - address: rancher-us-west2-a
+ user: aether
+ role: [controlplane,worker,etcd]
+ - address: rancher-us-west2-b
+ user: aether
+ role: [controlplane,worker,etcd]
+ - address: rancher-us-west2-c
+ user: aether
+ role: [controlplane,worker,etcd]
+cloud_provider:
+ name: gce
+ customCloudProvider: |-
+ [global]
+ project-id = m-cord
+ network-project-id = onf-vpn
+ network-name = default
+ subnetwork-name = default
+services:
+ etcd:
+ backup_config:
+ enabled: true
+ interval_hours: 6
+ retention: 60
+network:
+ plugin: calico
+ options:
+ calico_cloud_provider: gce
+monitoring:
+ provider: none
diff --git a/deployment-configs/aether/clusters/staging-central.yml b/deployment-configs/aether/clusters/staging-central.yml
new file mode 100644
index 0000000..30ca92e
--- /dev/null
+++ b/deployment-configs/aether/clusters/staging-central.yml
@@ -0,0 +1,121 @@
+name: staging-central
+rancher_kubernetes_engine_config:
+ authentication:
+ strategy: x509
+ cloud_provider:
+ name: gce
+ customCloudProvider: |-
+ [global]
+ project-id = m-cord
+ network-project-id = onf-vpn
+ network-name = default
+ subnetwork-name = default
+ regional = true
+ multizone = true
+ ignore_docker_version: true
+ ingress:
+ provider: nginx
+ kubernetes_version: v1.15.6-rancher1-2
+ monitoring:
+ provider: none
+ network:
+ options:
+ calico_cloud_provider: gce
+ plugin: calico
+ services:
+ etcd:
+ backup_config:
+ enabled: true
+ interval_hours: 12
+ retention: 6
+ safe_timestamp: false
+ creation: 12h
+ extra_args:
+ election-timeout: 5000
+ heartbeat-interval: 500
+ gid: 0
+ retention: 72h
+ snapshot: false
+ uid: 0
+ kube_api:
+ always_pull_images: false
+ pod_security_policy: false
+ service_node_port_range: 2000-36767
+ service_cluster_ip_range: 10.47.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubelet:
+ cluster_domain: staging.central
+ cluster_dns_server: 10.47.128.10
+ fail_swap_on: false
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kube-controller:
+ cluster_cidr: 10.47.0.0/17
+ service_cluster_ip_range: 10.47.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ scheduler:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubeproxy:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ ssh_agent_auth: false
+ addon_job_timeout: 30
+ addons: |-
+ ---
+ apiVersion: storage.k8s.io/v1
+ kind: StorageClass
+ metadata:
+ name: zonal-ssd
+ provisioner: kubernetes.io/gce-pd
+ parameters:
+ type: pd-ssd
+ ---
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ namespace: kube-system
+ name: coredns
+ data:
+ Corefile: |
+ .:53 {
+ errors
+ health
+ kubernetes staging.central in-addr.arpa ip6.arpa {
+ pods insecure
+ upstream
+ fallthrough in-addr.arpa ip6.arpa
+ ttl 30
+ }
+ prometheus :9153
+ forward . "/etc/resolv.conf"
+ cache 30
+ loop
+ reload
+ loadbalance
+ }
+ a.staging.edge:53 {
+ errors
+ cache 30
+ forward . 10.48.128.10
+ }
+ b.staging.edge:53 {
+ errors
+ cache 30
+ forward . 10.49.128.10
+ }
+ c.staging.edge:53 {
+ errors
+ cache 30
+ forward . 10.50.128.10
+ }
+
+windows_prefered_cluster: false
+docker_root_dir: /var/lib/docker
+local_cluster_auth_endpoint:
+ enabled: true
+enable_network_policy: false
+enable_cluster_alerting: false
+enable_cluster_monitoring: false
diff --git a/deployment-configs/aether/clusters/staging-edge-a.yml b/deployment-configs/aether/clusters/staging-edge-a.yml
new file mode 100644
index 0000000..9313549
--- /dev/null
+++ b/deployment-configs/aether/clusters/staging-edge-a.yml
@@ -0,0 +1,93 @@
+name: staging-edge-a
+rancher_kubernetes_engine_config:
+ authentication:
+ strategy: x509
+ ignore_docker_version: true
+ ingress:
+ provider: nginx
+ kubernetes_version: v1.15.6-rancher1-2
+ monitoring:
+ provider: none
+ network:
+ plugin: calico
+ services:
+ etcd:
+ backup_config:
+ enabled: true
+ interval_hours: 12
+ retention: 6
+ safe_timestamp: false
+ creation: 12h
+ extra_args:
+ election-timeout: 5000
+ heartbeat-interval: 500
+ gid: 0
+ retention: 72h
+ snapshot: false
+ uid: 0
+ kube_api:
+ always_pull_images: false
+ pod_security_policy: false
+ service_node_port_range: 2000-36767
+ service_cluster_ip_range: 10.48.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubelet:
+ cluster_domain: a.staging.edge
+ cluster_dns_server: 10.48.128.10
+ fail_swap_on: false
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kube-controller:
+ cluster_cidr: 10.48.0.0/17
+ service_cluster_ip_range: 10.48.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ scheduler:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubeproxy:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ ssh_agent_auth: false
+ addon_job_timeout: 30
+ addons: |-
+ ---
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ namespace: kube-system
+ name: coredns
+ data:
+ Corefile: |
+ .:53 {
+ errors
+ health
+ kubernetes a.staging.edge in-addr.arpa ip6.arpa {
+ pods insecure
+ upstream
+ fallthrough in-addr.arpa ip6.arpa
+ ttl 30
+ }
+ prometheus :9153
+ forward . "/etc/resolv.conf"
+ cache 30
+ loop
+ reload
+ loadbalance
+ }
+ staging.central:53 {
+ errors
+ cache 30
+ forward . 10.47.128.10
+ }
+ addons_include:
+ - https://raw.githubusercontent.com/intel/multus-cni/master/images/multus-daemonset-pre-1.16.yml
+
+windows_prefered_cluster: false
+docker_root_dir: /var/lib/docker
+local_cluster_auth_endpoint:
+ enabled: true
+enable_network_policy: false
+enable_cluster_alerting: false
+enable_cluster_monitoring: false
diff --git a/deployment-configs/aether/clusters/staging-edge-b.yml b/deployment-configs/aether/clusters/staging-edge-b.yml
new file mode 100644
index 0000000..0bea65b
--- /dev/null
+++ b/deployment-configs/aether/clusters/staging-edge-b.yml
@@ -0,0 +1,93 @@
+name: staging-edge-b
+rancher_kubernetes_engine_config:
+ authentication:
+ strategy: x509
+ ignore_docker_version: true
+ ingress:
+ provider: nginx
+ kubernetes_version: v1.15.6-rancher1-2
+ monitoring:
+ provider: none
+ network:
+ plugin: calico
+ services:
+ etcd:
+ backup_config:
+ enabled: true
+ interval_hours: 12
+ retention: 6
+ safe_timestamp: false
+ creation: 12h
+ extra_args:
+ election-timeout: 5000
+ heartbeat-interval: 500
+ gid: 0
+ retention: 72h
+ snapshot: false
+ uid: 0
+ kube_api:
+ always_pull_images: false
+ pod_security_policy: false
+ service_node_port_range: 2000-36767
+ service_cluster_ip_range: 10.49.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubelet:
+ cluster_domain: b.staging.edge
+ cluster_dns_server: 10.49.128.10
+ fail_swap_on: false
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kube-controller:
+ cluster_cidr: 10.49.0.0/17
+ service_cluster_ip_range: 10.49.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ scheduler:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubeproxy:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ ssh_agent_auth: false
+ addon_job_timeout: 30
+ addons: |-
+ ---
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ namespace: kube-system
+ name: coredns
+ data:
+ Corefile: |
+ .:53 {
+ errors
+ health
+ kubernetes b.staging.edge in-addr.arpa ip6.arpa {
+ pods insecure
+ upstream
+ fallthrough in-addr.arpa ip6.arpa
+ ttl 30
+ }
+ prometheus :9153
+ forward . "/etc/resolv.conf"
+ cache 30
+ loop
+ reload
+ loadbalance
+ }
+ staging.central:53 {
+ errors
+ cache 30
+ forward . 10.47.128.10
+ }
+ addons_include:
+ - https://raw.githubusercontent.com/intel/multus-cni/master/images/multus-daemonset-pre-1.16.yml
+
+windows_prefered_cluster: false
+docker_root_dir: /var/lib/docker
+local_cluster_auth_endpoint:
+ enabled: true
+enable_network_policy: false
+enable_cluster_alerting: false
+enable_cluster_monitoring: false
diff --git a/deployment-configs/aether/clusters/staging-edge-c.yml b/deployment-configs/aether/clusters/staging-edge-c.yml
new file mode 100644
index 0000000..c72c129
--- /dev/null
+++ b/deployment-configs/aether/clusters/staging-edge-c.yml
@@ -0,0 +1,93 @@
+name: staging-edge-c
+rancher_kubernetes_engine_config:
+ authentication:
+ strategy: x509
+ ignore_docker_version: true
+ ingress:
+ provider: nginx
+ kubernetes_version: v1.15.6-rancher1-2
+ monitoring:
+ provider: none
+ network:
+ plugin: calico
+ services:
+ etcd:
+ backup_config:
+ enabled: true
+ interval_hours: 12
+ retention: 6
+ safe_timestamp: false
+ creation: 12h
+ extra_args:
+ election-timeout: 5000
+ heartbeat-interval: 500
+ gid: 0
+ retention: 72h
+ snapshot: false
+ uid: 0
+ kube_api:
+ always_pull_images: false
+ pod_security_policy: false
+ service_node_port_range: 2000-36767
+ service_cluster_ip_range: 10.50.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubelet:
+ cluster_domain: c.staging.edge
+ cluster_dns_server: 10.50.128.10
+ fail_swap_on: false
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kube-controller:
+ cluster_cidr: 10.50.0.0/17
+ service_cluster_ip_range: 10.50.128.0/17
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ scheduler:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ kubeproxy:
+ extra_args:
+ feature-gates: "SCTPSupport=True"
+ ssh_agent_auth: false
+ addon_job_timeout: 30
+ addons: |-
+ ---
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ namespace: kube-system
+ name: coredns
+ data:
+ Corefile: |
+ .:53 {
+ errors
+ health
+ kubernetes c.staging.edge in-addr.arpa ip6.arpa {
+ pods insecure
+ upstream
+ fallthrough in-addr.arpa ip6.arpa
+ ttl 30
+ }
+ prometheus :9153
+ forward . "/etc/resolv.conf"
+ cache 30
+ loop
+ reload
+ loadbalance
+ }
+ staging.central:53 {
+ errors
+ cache 30
+ forward . 10.47.128.10
+ }
+ addons_include:
+ - https://raw.githubusercontent.com/intel/multus-cni/master/images/multus-daemonset-pre-1.16.yml
+
+windows_prefered_cluster: false
+docker_root_dir: /var/lib/docker
+local_cluster_auth_endpoint:
+ enabled: true
+enable_network_policy: false
+enable_cluster_alerting: false
+enable_cluster_monitoring: false