Patrick de Ruiter 47aaaa2143
Initial commit: Terraform certificate automation module
- Add Vault AppRole and Ansible integration for certificates
- Configure policies and secret engines
- Add comprehensive documentation
2025-11-01 06:18:46 +01:00

34 lines
682 B
Smarty
Executable File

# ## Configure 'ip' variable to bind kubernetes services on a
# ## different ip than the default iface
# ## We should set etcd_member_name for etcd cluster. The node that is not a etcd member do not need to set the value, or can set the empty string value.
[all]
%{ for ip in k8s_master_ip ~}
${ip}.${domain}
%{ endfor ~}
%{ for ip in k8s_worker_name ~}
${ip}.${domain}
%{ endfor ~}
[kube_control_plane]
%{ for ip in k8s_master_ip ~}
${ip}.${domain}
%{ endfor ~}
[etcd]
%{ for ip in k8s_master_ip ~}
${ip}.${domain}
%{ endfor ~}
[kube_node]
%{ for ip in k8s_worker_name ~}
${ip}.${domain}
%{ endfor ~}
[calico_rr]
[k8s_cluster:children]
kube_control_plane
kube_node
calico_rr