ansible/roles/kube_vip/vars/main.yaml at 8da0ab98f8a5beacd77c3c52bf3d1d516cc336d9 - ansible - Gitea: Git with a cup of tea

tudattr/ansible

Files

Tuan-Dat Tran 5bc3024eaf feat(k3s): replace nginx loadbalancer with kube-vip for control-plane HA

Deploys kube-vip as a DaemonSet on all k3s server nodes, advertising a
VIP (192.168.20.2) via ARP. Eliminates the single-point-of-failure
k3s-loadbalancer VM.

- New kube_vip role: RBAC + DaemonSet templates, TLS SAN cert rotation
- playbooks/kube-vip.yaml: migration playbook (serial=1, idempotent)
- Updated k3s install tasks (server primary/secondary, agent) to use k3s_vip
  instead of the loadbalancer VM IP
- Added k3s_vip: 192.168.20.2 to group_vars (below DHCP range .11-.250)

Migration steps in playbook header comment.

2026-04-26 12:08:42 +02:00

6 lines

205 B

YAML

Raw Blame History

 ---
 kube_vip_version: "v0.8.9"
 kube_vip_interface: "eth0"
 kube_vip_manifests_dir: "/var/lib/rancher/k3s/server/manifests"
 kube_vip_static_pod_path: "/var/lib/rancher/k3s/agent/pod-manifests/kube-vip.yaml"