集群配置（ClusterConfig）文件说明¶

apiVersion: provision.daocloud.io/v1alpha1
kind: ClusterConfig
metadata:
  creationTimestamp: null
spec:
  loadBalancer: NodePort  # NodePort(default), metallb, cloudLB (Cloud Controller)
  istioGatewayVip: 10.6.127.254/32 # if loadBalancer is metallb，is requireded.
                                   #  Provides UI and OpenAPI access to DCE.
  registryVip: 10.6.127.253/32     # if loadBalancer is metallb，is requireded.
                                   # Access entry for the mirror repository of the Global cluster
  insightVip: 10.6.127.252/32 # if loadBalancer is metallb，is requireded.
                              # It is used for the insight data collection portal of the GLobal cluster,
                              # and the insight-agent of the sub-cluster can report data to this VIP
  compactClusterMode: false
  globalClusterName: my-global-cluster
  mgmtClusterName: my-mgmt-cluster
  mgmtMasterNodes:
    - nodeName: "rm-master1" # Node Name will override the hostName, should align with RFC1123 stsandard
      ip: 10.6.127.232
      ansibleUser: "root"   # username
      ansiblePass: "123456" # password
  mgmtMasterNodes:
    - nodeName: "rm-master1" # Node Name will override the hostName, should align with RFC1123 stsandard
      ip: 10.6.127.230
      ansibleUser: "root"   # username
      ansiblePass: "123456" # password
  globalMasterNodes:
    - nodeName: "rg-master1"
      ip: 10.6.127.231
      ansibleUser: "root"
      ansiblePass: "123456"
  globalWorkerNodes:
    - nodeName: "rg-worker1"
      ip: 10.6.127.234
      ansibleUser: "root"
      ansiblePass: "123456"
  ntpServer:
    - "172.30.120.197 iburst" # time synchronization server
    - 0.pool.ntp.org
    - ntp1.aliyun.com
    - ntp.ntsc.ac.cn
  persistentRegistryDomainName: temp-registry.daocloud.io # The local image registry which images come from.
  imageConfig: # the kubean image config as below
    imageRepository: temp-registry.daocloud.io
    binaryRepository: http://temp-registry.daocloud.io:9000/kubean
  repoConfig: # the kubean rpm/deb source configuration as below
    # `centos` using CentOS, RedHat, AlmaLinux or Fedora
    # `debian` using Debian
    # `ubuntu` using Ubuntu
    repoType: centos
    dockerRepo: "http://temp-registry.daocloud.io:9000/kubean/centos/$releasever/os/$basearch"
    extraRepos:
    - http://temp-registry.daocloud.io:9000/kubean/centos-iso/\$releasever/os/\$basearch
    - http://temp-registry.daocloud.io:9000/kubean/centos/\$releasever/os/\$basearch
    # k8sVersion only take effect in online mode, dont set it in offline mode
    # k8sVersion: v1.24.6
  auditConfig:
    logPath: /var/log/audit/kube-apiserver-audit.log
    logHostPath: /var/log/kubernetes/audit
    # policyFile: /etc/kubernetes/audit-policy/apiserver-audit-policy.yaml
    # logMaxAge: 30
    # logMaxBackups: 10
    # logMaxSize: 100
    # policyCustomRules: >
    #   - level: None
    #     users: []
    #     verbs: []
    #     resources: []
  network:
    cni: calico
    clusterCIDR: 100.96.0.0/11
    serviceCIDR: 100.64.0.0/13
  cri:
    criProvider: containerd
    # criVersion only take effect in online mode, dont set it in offline mode
    # criVersion: 1.6.8
  addons:
    ingress:
      version: 1.2.3
    dns:
      type: CoreDNS
      version: v1.8.4