forked from Tanzu-Solutions-Engineering/tkg-lab
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathREDACTED-params.yaml
102 lines (102 loc) · 4.31 KB
/
REDACTED-params.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
iaas: aws # aws or vsphere
vmware-id: dpfeffer
environment-name: tkg-aws-e2-lab # used for aws ssh key name
subdomain: tkg-aws-e2-lab.winterfell.live
lets-encrypt-acme-email: dpfeffer@vmware.com
dns:
provider: aws-route53
tmc:
cluster-group: se-dpfeffer-dev # scripts will create this cluster group if it doesn't already exist
data-protection-backup-location-name: REDACTED # used by TMC data protection, fill in the name of a TMC data protection credential
acme-fitness:
tmc-workspace: dpfeffer-acme-fitness-dev
fqdn: acme-fitness.highgarden.tkg-aws-e2-lab.winterfell.live
aws:
region: us-east-2
access-key-id: REDACTED
secret-access-key: REDACTED
hosted-zone-id: Z00636703RP40GVIAWHLA # clear this value out to start, and script will generate a new zone for you
azure:
environment: "AzurePublicCloud" # NOTE: Always "AzurePublicCloud"
location: # eg. canadacentral. az account list-locations -o table
control-plane-machine-type: # eg. Standard_D2s_v3
node-machine-type: # eg. Standard_D2s_v3
app-name: # set an app name or one will be set by the azure object script
vsphere:
server: vcenter7.hyrulelab.com
username: administrator@vsphere.local
password: "REDACTED_VALUE_KEEP_DOUBLE_QUOTES"
insecure: true
datastore: datastore2
template_folder: /Datacenter/vm/tkg
local_ova_folder: /Users/jaguilar/Code/tkg/
gcloud:
project: fe-jaguilar
management-cluster:
worker-replicas: 2
name: dragonstone
ingress-fqdn: '*.dragonstone.tkg-aws-e2-lab.winterfell.live'
dex-fqdn: dex.dragonstone.tkg-aws-e2-lab.winterfell.live
controlplane-endpoint: 192.168.7.180 # only required for vsphere iaas
metallb-start-ip: 192.168.7.200 # only required for vsphere iaas
metallb-end-ip: 192.168.7.209 # only required for vsphere iaas
shared-services-cluster:
worker-replicas: 2
name: dorn
ingress-fqdn: '*.dorn.tkg-aws-e2-lab.winterfell.live'
gangway-fqdn: gangway.dorn.tkg-aws-e2-lab.winterfell.live
elasticsearch-fqdn: elasticsearch.dorn.tkg-aws-e2-lab.winterfell.live
kibana-fqdn: logs.dorn.tkg-aws-e2-lab.winterfell.live
controlplane-endpoint: 192.168.7.181 # only required for vsphere iaas
metallb-start-ip: 192.168.7.210 # only required for vsphere iaas
metallb-end-ip: 192.168.7.219 # only required for vsphere iaas
kubernetes-version: v1.19.1+vmware.2 # Explicitly set to v1.19.1 because v1.19.3 has an issue with TBS
workload-cluster:
worker-replicas: 2
name: highgarden
ingress-fqdn: '*.highgarden.tkg-aws-e2-lab.winterfell.live'
gangway-fqdn: gangway.highgarden.tkg-aws-e2-lab.winterfell.live
prometheus-fqdn: prometheus.highgarden.tkg-vsphere-lab.winterfell.live # Leave this blank if you choose not to expose prometheus
grafana-fqdn: grafana.highgarden.tkg-vsphere-lab.winterfell.live
controlplane-endpoint: 192.168.7.182 # only required for vsphere iaas
metallb-start-ip: 192.168.7.220 # only required for vsphere iaas
metallb-end-ip: 192.168.7.229 # only required for vsphere iaas
okta:
auth-server-fqdn: dev-677945.okta.com
dex-app-client-id: REDACTED
dex-app-client-secret: REDACTED
harbor-app-client-id: REDACTED # if deploying harbor and using OIDC integration
harbor-app-client-secret: REDACTED # if deploying harbor and using OIDC integration
concourse-app-client-id: REDACTED # if deploying harbor and using OIDC integration
concourse-app-client-secret: REDACTED # if deploying harbor and using OIDC integration
wavefront:
api-key: REDACTED
url: https://surf.wavefront.com
cluster-name-prefix: dpfeffer
jaeger-app-name-prefix: dpfeffer-acme-fitness
velero:
bucket: pa-dpfeffer-mgmt-velero
region: us-east-2
harbor:
harbor-cn: harbor.dorn.tkg-aws-e2-lab.winterfell.live
notary-cn: notary.dorn.tkg-aws-e2-lab.winterfell.live
# blob-storage:
# type: s3 # Default is PVC, and can optionally be S3/MinIO
# regionendpoint: http://minio.server:9000 # Not required for AWS S3
# region: us-east-1
# access-key-id: REDACTED
# secret-access-key: REDACTED
# bucket: harbor-storage
# secure: false # set to true for HTTPS endpoints
argocd:
server-fqdn: argocd.dorn.tkg-aws-e2-lab.winterfell.live
password: REDACTED
concourse:
namespace: concourse
fqdn: concourse.dorn.tkg-aws-e2-lab.winterfell.live
tmc-workspace: concourse-workspace
admin-password: REDACTED
kubeapps:
server-fqdn: kubeapps.highgarden.tkg-aws-e2-lab.winterfell.live
grafana:
admin-password: REDACTED