cluster.yml

---
nodes:
- address: vmnuvem1.sj.ifsc.edu.br
  role: [controlplane,worker,etcd]
  hostname_override: vmnuvem1
  user: root
  ssh_key_path: ~/.ssh/id_rsa
- address: vmnuvem2.sj.ifsc.edu.br
  role: [controlplane,worker,etcd]
  hostname_override: vmnuvem2
  user: root
  ssh_key_path: ~/.ssh/id_rsa
- address: vmnuvem3.sj.ifsc.edu.br
  role: [controlplane,worker,etcd]
  hostname_override: vmnuvem3
  user: root
  ssh_key_path: ~/.ssh/id_rsa
- address: vmnuvem4.sj.ifsc.edu.br
  role: [worker]
  hostname_override: vmnuvem4
  user: root
  ssh_key_path: ~/.ssh/id_rsa
- address: vmnuvem5.sj.ifsc.edu.br
  role: [worker]
  hostname_override: vmnuvem5
  user: root
  ssh_key_path: ~/.ssh/id_rsa

ssh_key_path: ~/.ssh/id_rsa

cluster_name: nuvem-ifsc-sje

ssh_agent_auth: true

network:
    plugin: flannel

services:
  etcd:
    snapshot: true
    creation: 5h0s
    retention: 48h
  kubelet:
    extra_binds:
      - "/etc/iscsi:/etc/iscsi"
      - "/sbin/iscsiadm:/sbin/iscsiadm"

#kubernetes_version: "v1.13.11-rancher1-2"

system_images:
    kubernetes: rancher/hyperkube:v1.13.11-rancher1

authentication:
  strategy: x509
  sans:
  - "api-cloud.sj.ifsc.edu.br"

dns:
    provider: kube-dns
    upstreamnameservers:
    - 191.36.8.2  
    - 191.36.8.3

ingress: 
  provider: "nginx"
  extra_args:
    default-ssl-certificate: "ingress-nginx/ingress-default-cert"

# As chaves tls.crt e tls.key (o arquivo abaixo) estão no arquivo no ingress-default-cert.yaml no nosso repositório secrets_kubernetes.

# addons: |-
#   apiVersion: v1
#   data:
#     tls.crt: *
#     tls.key: *
#   kind: Secret
#   metadata:
#     creationTimestamp: null
#     name: ingress-default-cert
#     namespace: ingress-nginx
#   type: kubernetes.io/tls