161 lines
5.1 KiB
YAML
161 lines
5.1 KiB
YAML
# Additional Trusted CAs.
|
|
# Enable this flag and add your CA certs as a secret named tls-ca-additional in the namespace.
|
|
# See README.md for details.
|
|
additionalTrustedCAs: false
|
|
|
|
antiAffinity: preferred
|
|
topologyKey: kubernetes.io/hostname
|
|
|
|
# Audit Logs https://rancher.com/docs/rancher/v2.x/en/installation/api-auditing/
|
|
# The audit log is piped to the console of the rancher-audit-log container in the rancher pod.
|
|
# https://rancher.com/docs/rancher/v2.x/en/installation/api-auditing/
|
|
# destination stream to sidecar container console or hostPath volume
|
|
# level: Verbosity of logs, 0 to 3. 0 is off 3 is a lot.
|
|
auditLog:
|
|
destination: sidecar
|
|
hostPath: /var/log/rancher/audit/
|
|
level: 0
|
|
maxAge: 1
|
|
maxBackup: 1
|
|
maxSize: 100
|
|
|
|
# As of Rancher v2.5.0 this flag is deprecated and must be set to 'true' in order for Rancher to start
|
|
addLocal: "true"
|
|
|
|
# Image for collecting rancher audit logs.
|
|
# Important: update pkg/image/export/main.go when this default image is changed, so that it's reflected accordingly in rancher-images.txt generated for air-gapped setups.
|
|
busyboxImage: rancher/mirrored-library-busybox
|
|
busyboxImageTag: 1.34.1
|
|
|
|
# Override imagePullPolicy for busybox images
|
|
# options: Always, Never, IfNotPresent
|
|
# Defaults to IfNotPresent
|
|
# busyboxImagePullPolicy: <pullPolicy>
|
|
|
|
# Add debug flag to Rancher server
|
|
debug: false
|
|
|
|
# When starting Rancher for the first time, bootstrap the admin as restricted-admin
|
|
restrictedAdmin: false
|
|
|
|
# Extra environment variables passed to the rancher pods.
|
|
# extraEnv:
|
|
# - name: CATTLE_TLS_MIN_VERSION
|
|
# value: "1.0"
|
|
|
|
# Fully qualified name to reach your Rancher server
|
|
hostname: rancher.107421.xyz
|
|
|
|
## Optional array of imagePullSecrets containing private registry credentials
|
|
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
|
|
imagePullSecrets: []
|
|
# - name: secretName
|
|
|
|
### ingress ###
|
|
# Readme for details and instruction on adding tls secrets.
|
|
ingress:
|
|
# If set to false, ingress will not be created
|
|
# Defaults to true
|
|
# options: true, false
|
|
enabled: true
|
|
includeDefaultExtraAnnotations: true
|
|
extraAnnotations:
|
|
cert-manager.io/cluster-issuer: "cm-cloudflare-7421"
|
|
ingressClassName: "traefik"
|
|
|
|
# configurationSnippet - Add additional Nginx configuration. This example statically sets a header on the ingress.
|
|
# configurationSnippet: |
|
|
# more_set_input_headers "X-Forwarded-Host: {{ .Values.hostname }}";
|
|
|
|
tls:
|
|
# options: rancher, letsEncrypt, secret
|
|
source: letsEncrypt
|
|
secretName: rancher-107421-xyz-tls
|
|
|
|
### LetsEncrypt config ###
|
|
# ProTip: The production environment only allows you to register a name 5 times a week.
|
|
# Use staging until you have your config right.
|
|
letsEncrypt:
|
|
email: zeaslity@gmail.com
|
|
environment: production
|
|
ingress:
|
|
#options: traefik, nginx
|
|
class: "traefik"
|
|
# If you are using certs signed by a private CA set to 'true' and set the 'tls-ca'
|
|
# in the 'rancher-system' namespace. See the README.md for details
|
|
privateCA: false
|
|
|
|
# http[s] proxy server passed into rancher server.
|
|
# proxy: http://<username>@<password>:<url>:<port>
|
|
|
|
# comma separated list of domains or ip addresses that will not use the proxy
|
|
noProxy: 127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.svc,.cluster.local,.wdd.io
|
|
|
|
# Override rancher image location for Air Gap installs
|
|
rancherImage: rancher/rancher
|
|
# rancher/rancher image tag. https://hub.docker.com/r/rancher/rancher/tags/
|
|
# Defaults to .Chart.appVersion
|
|
# rancherImageTag: v2.0.7
|
|
|
|
# Override imagePullPolicy for rancher server images
|
|
# options: Always, Never, IfNotPresent
|
|
# Defaults to IfNotPresent
|
|
# rancherImagePullPolicy: <pullPolicy>
|
|
|
|
# Number of Rancher server replicas. Setting to negative number will dynamically between 0 and the abs(replicas) based on available nodes.
|
|
# of available nodes in the cluster
|
|
replicas: 1
|
|
|
|
# Set pod resource requests/limits for Rancher.
|
|
resources: {}
|
|
|
|
#
|
|
# tls
|
|
# Where to offload the TLS/SSL encryption
|
|
# - ingress (default)
|
|
# - external
|
|
tls: ingress
|
|
|
|
systemDefaultRegistry: ""
|
|
|
|
# Set to use the packaged system charts
|
|
useBundledSystemChart: false
|
|
|
|
# Certmanager version compatibility
|
|
certmanager:
|
|
version: "1.6.1"
|
|
|
|
# Rancher custom logos persistence
|
|
customLogos:
|
|
enabled: false
|
|
volumeSubpaths:
|
|
emberUi: "ember"
|
|
vueUi: "vue"
|
|
## Volume kind to use for persistence: persistentVolumeClaim, configMap
|
|
volumeKind: persistentVolumeClaim
|
|
## Use an existing volume. Custom logos should be copied to the volume by the user
|
|
# volumeName: custom-logos
|
|
## Just for volumeKind: persistentVolumeClaim
|
|
## To disables dynamic provisioning, set storageClass: "" or storageClass: "-"
|
|
# storageClass: "-"
|
|
accessMode: ReadWriteOnce
|
|
size: 1Gi
|
|
|
|
# Rancher post-delete hook
|
|
postDelete:
|
|
enabled: true
|
|
image:
|
|
repository: rancher/shell
|
|
tag: v0.1.18
|
|
namespaceList:
|
|
- cattle-fleet-system
|
|
- cattle-system
|
|
- rancher-operator-system
|
|
# Number of seconds to wait for an app to be uninstalled
|
|
timeout: 120
|
|
# by default, the job will fail if it fail to uninstall any of the apps
|
|
ignoreTimeoutError: false
|
|
|
|
# Set a bootstrap password. If leave empty, a random password will be generated.
|
|
bootstrapPassword: "loveff.cxc.23"
|