Skip to content

Commit

Permalink
Allow configuring RKE ACI network provider (#912)
Browse files Browse the repository at this point in the history
* Add and doc rke aci network provider fields (required and sensitive)
* Add fields introduced in ACI-CNI 5.2.3.2
  • Loading branch information
fpants authored Aug 17, 2022
1 parent bd2e8fc commit d6b9660
Show file tree
Hide file tree
Showing 4 changed files with 1,121 additions and 0 deletions.
80 changes: 80 additions & 0 deletions docs/resources/cluster.md
Original file line number Diff line number Diff line change
Expand Up @@ -999,6 +999,7 @@ The following attributes are exported:

##### Arguments

* `aci_network_provider` - (Optional/Computed) ACI provider config for RKE network (list maxitems:63)
* `calico_network_provider` - (Optional/Computed) Calico provider config for RKE network (list maxitems:1)
* `canal_network_provider` - (Optional/Computed) Canal provider config for RKE network (list maxitems:1)
* `flannel_network_provider` - (Optional/Computed) Flannel provider config for RKE network (list maxitems:1)
Expand All @@ -1008,6 +1009,85 @@ The following attributes are exported:
* `plugin` - (Optional/Computed) Plugin for RKE network. `canal` (default), `flannel`, `calico`, `none` and `weave` are supported. (string)
* `tolerations` - (Optional) Network add-on tolerations (list)

##### `aci_network_provider`

###### Arguments

* `aep` - (Required) Attachable entity profile (string)
* `apic_hosts` - (Required) List of APIC hosts to connect for APIC API (list)
* `apic_refresh_ticker_adjust` - (Optional) APIC refresh ticker adjust amount (string)
* `apic_refresh_time` - (Optional) APIC refresh time in seconds (string)
* `apic_subscription_delay` - (Optional) APIC subscription delay amount (string)
* `apic_user_crt` - (Required/Sensitive) APIC user certificate (string)
* `apic_user_key` - (Required/Sensitive) APIC user key (string)
* `apic_user_name` - (Required) APIC user name (string)
* `capic` - (Optional) cAPIC cloud (string)
* `controller_log_level` - (Optional) Log level for ACI controller (string)
* `disable_periodic_snat_global_info_sync` - (Optional) Whether to disable periodic SNAT global info sync (string)
* `disable_wait_for_network` - (Optional) Whether to disable waiting for network (string)
* `drop_log_enable` - (Optional) Whether to enable drop log (string)
* `duration_wait_for_network` - (Optional) The duration to wait for network (string)
* `extern_dynamic` - (Required) Subnet to use for dynamic external IPs (string)
* `enable_endpoint_slice` - (Optional) Whether to enable endpoint slices (string)
* `encap_type` - (Required) Encap type: vxlan or vlan (string)
* `ep_registry` - (Optional) EP registry (string)
* `gbp_pod_subnet` - (Optional) GBH pod subnet (string)
* `host_agent_log_level` - (Optional) Log level for ACI host agent (string)
* `image_pull_policy` - (Optional) Image pull policy (string)
* `image_pull_secret` - (Optional) Image pull policy (string)
* `infra_vlan` - (Optional) The VLAN used by ACI infra (string)
* `install_istio` - (Optional) Whether to install Istio (string)
* `istio_profile` - (Optional) Istio profile name (string)
* `kafka_brokers` - (Optional) List of Kafka broker hosts (list)
* `kafka_client_crt` - (Optional) Kafka client certificate (string)
* `kafka_client_key` - (Optional) Kafka client key (string)
* `kube_api_vlan` - (Required) The VLAN used by the physdom for nodes (string)
* `l3out` - (Required) L3out (string)
* `l3out_external_networks` - (Required) L3out external networks (list)
* `max_nodes_svc_graph` - (Optional) Max nodes in service graph (string)
* `mcast_range_end` - (Required) End of mcast range (string)
* `mcast_range_start` - (Required) Start of mcast range (string)
* `mtu_head_room` - (Optional) MTU head room amount (string)
* `multus_disable` - (Optional) Whether to disable Multus (string)
* `no_priority_class` - (Optional) Whether to use priority class (string)
* `node_pod_if_enable` - (Optional) Whether to enable node pod interface (string)
* `node_subnet` - (Required) Subnet to use for nodes (string)
* `ovs_memory_limit` - (Optional) OVS memory limit (string)
* `opflex_log_level` - (Optional) Log level for ACI opflex (string)
* `opflex_client_ssl` - (Optional) Whether to use client SSL for Opflex (string)
* `opflex_device_delete_timeout` - (Optional) Opflex device delete timeout (string)
* `opflex_mode` - (Optional) Opflex mode (string)
* `opflex_server_port` - (Optional) Opflex server port (string)
* `overlay_vrf_name` - (Optional) Overlay VRF name (string)
* `pbr_tracking_non_snat` - (Optional) Policy-based routing tracking non snat (string)
* `pod_subnet_chunk_size` - (Optional) Pod subnet chunk size (string)
* `run_gbp_container` - (Optional) Whether to run GBP container (string)
* `run_opflex_server_container` - (Optional) Whether to run Opflex server container (string)
* `node_svc_subnet` - (Required) Subnet to use for service graph (string)
* `service_monitor_interval` - (Optional) Service monitor interval (string)
* `service_vlan` - (Required) The VLAN used by LoadBalancer services (string)
* `snat_contract_scope` - (Optional) Snat contract scope (string)
* `snat_namespace` - (Optional) Snat namespace (string)
* `snat_port_range_end` - (Optional) End of snat port range (string)
* `snat_port_range_start` - (Optional) End of snat port range (string)
* `snat_ports_per_node` - (Optional) Snat ports per node (string)
* `sriov_enable` - (Optional) Whether to enable SR-IOV (string)
* `extern_static` - (Required) Subnet to use for static external IPs (string)
* `subnet_domain_name` - (Optional) Subnet domain name (string)
* `system_id` - (Required) ACI system ID (string)
* `tenant` - (Optional) ACI tenant (string)
* `token` - (Required/Sensitive) ACI token (string)
* `use_aci_anywhere_crd` - (Optional) Whether to use ACI anywhere CRD (string)
* `use_aci_cni_priority_class` - (Optional) Whether to use ACI CNI priority class (string)
* `use_cluster_role` - (Optional) Whether to use cluster role (string)
* `use_host_netns_volume` - (Optional) Whether to use host netns volume (string)
* `use_opflex_server_volume` - (Optional) Whether use Opflex server volume (string)
* `use_privileged_container` - (Optional) Whether ACI containers should run as privileged (string)
* `vrf_name` - (Required) VRF name (string)
* `vrf_tenant` - (Required) VRF tenant (string)
* `vmm_controller` - (Optional) VMM controller configuration (string)
* `vmm_domain` - (Optional) VMM domain configuration (string)

##### `calico_network_provider`

###### Arguments
Expand Down
Loading

0 comments on commit d6b9660

Please sign in to comment.