feat(terraform): updated configs for yc lab

This commit is contained in:
ITQ
2026-08-18 23:11:31 +03:00
parent d9105dee7b
commit 48f67a284e
13 changed files with 101 additions and 25 deletions
@@ -44,9 +44,29 @@ runcmd:
resize2fs $DISK
- |
curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=stable INSTALL_K3S_EXEC="server \
-v 2 \
--bind-address 0.0.0.0 \
--https-listen-port 6443 \
--server=https://${k3s_master_ip}:6443 \
--token=${k3s_token} \
--node-name=`hostname -f` \
--cluster-cidr 10.96.0.0/16 \
--service-cidr 10.97.0.0/16 \
--cluster-dns 10.97.0.10 \
--tls-san ${k3s_fqdn} \
--tls-san-security \
--cluster-domain cluster.local \
--disable coredns,traefik,local-storage,metrics-server,runtimes \
--disable-network-policy \
--disable-kube-proxy \
--flannel-backend none \
--egress-selector-mode agent \
--servicelb-namespace kube-system \
--nonroot-devices \
--secrets-encryption-provider secretbox \
--lb-server-port 6444 \
--write-kubeconfig-mode 0600 \
--write-kubeconfig-group root \
--write-kubeconfig ${k3s_dir}/kubeconfig/config \
--image-credential-provider-bin-dir /var/lib/rancher/credentialprovider/bin \
--image-credential-provider-config /var/lib/rancher/credentialprovider/config.yaml \