Skip to content

Commit d6b9660

Browse files
authored
Allow configuring RKE ACI network provider (#912)
* Add and doc rke aci network provider fields (required and sensitive) * Add fields introduced in ACI-CNI 5.2.3.2
1 parent bd2e8fc commit d6b9660

4 files changed

Lines changed: 1121 additions & 0 deletions

File tree

docs/resources/cluster.md

Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -999,6 +999,7 @@ The following attributes are exported:
999999

10001000
##### Arguments
10011001

1002+
* `aci_network_provider` - (Optional/Computed) ACI provider config for RKE network (list maxitems:63)
10021003
* `calico_network_provider` - (Optional/Computed) Calico provider config for RKE network (list maxitems:1)
10031004
* `canal_network_provider` - (Optional/Computed) Canal provider config for RKE network (list maxitems:1)
10041005
* `flannel_network_provider` - (Optional/Computed) Flannel provider config for RKE network (list maxitems:1)
@@ -1008,6 +1009,85 @@ The following attributes are exported:
10081009
* `plugin` - (Optional/Computed) Plugin for RKE network. `canal` (default), `flannel`, `calico`, `none` and `weave` are supported. (string)
10091010
* `tolerations` - (Optional) Network add-on tolerations (list)
10101011

1012+
##### `aci_network_provider`
1013+
1014+
###### Arguments
1015+
1016+
* `aep` - (Required) Attachable entity profile (string)
1017+
* `apic_hosts` - (Required) List of APIC hosts to connect for APIC API (list)
1018+
* `apic_refresh_ticker_adjust` - (Optional) APIC refresh ticker adjust amount (string)
1019+
* `apic_refresh_time` - (Optional) APIC refresh time in seconds (string)
1020+
* `apic_subscription_delay` - (Optional) APIC subscription delay amount (string)
1021+
* `apic_user_crt` - (Required/Sensitive) APIC user certificate (string)
1022+
* `apic_user_key` - (Required/Sensitive) APIC user key (string)
1023+
* `apic_user_name` - (Required) APIC user name (string)
1024+
* `capic` - (Optional) cAPIC cloud (string)
1025+
* `controller_log_level` - (Optional) Log level for ACI controller (string)
1026+
* `disable_periodic_snat_global_info_sync` - (Optional) Whether to disable periodic SNAT global info sync (string)
1027+
* `disable_wait_for_network` - (Optional) Whether to disable waiting for network (string)
1028+
* `drop_log_enable` - (Optional) Whether to enable drop log (string)
1029+
* `duration_wait_for_network` - (Optional) The duration to wait for network (string)
1030+
* `extern_dynamic` - (Required) Subnet to use for dynamic external IPs (string)
1031+
* `enable_endpoint_slice` - (Optional) Whether to enable endpoint slices (string)
1032+
* `encap_type` - (Required) Encap type: vxlan or vlan (string)
1033+
* `ep_registry` - (Optional) EP registry (string)
1034+
* `gbp_pod_subnet` - (Optional) GBH pod subnet (string)
1035+
* `host_agent_log_level` - (Optional) Log level for ACI host agent (string)
1036+
* `image_pull_policy` - (Optional) Image pull policy (string)
1037+
* `image_pull_secret` - (Optional) Image pull policy (string)
1038+
* `infra_vlan` - (Optional) The VLAN used by ACI infra (string)
1039+
* `install_istio` - (Optional) Whether to install Istio (string)
1040+
* `istio_profile` - (Optional) Istio profile name (string)
1041+
* `kafka_brokers` - (Optional) List of Kafka broker hosts (list)
1042+
* `kafka_client_crt` - (Optional) Kafka client certificate (string)
1043+
* `kafka_client_key` - (Optional) Kafka client key (string)
1044+
* `kube_api_vlan` - (Required) The VLAN used by the physdom for nodes (string)
1045+
* `l3out` - (Required) L3out (string)
1046+
* `l3out_external_networks` - (Required) L3out external networks (list)
1047+
* `max_nodes_svc_graph` - (Optional) Max nodes in service graph (string)
1048+
* `mcast_range_end` - (Required) End of mcast range (string)
1049+
* `mcast_range_start` - (Required) Start of mcast range (string)
1050+
* `mtu_head_room` - (Optional) MTU head room amount (string)
1051+
* `multus_disable` - (Optional) Whether to disable Multus (string)
1052+
* `no_priority_class` - (Optional) Whether to use priority class (string)
1053+
* `node_pod_if_enable` - (Optional) Whether to enable node pod interface (string)
1054+
* `node_subnet` - (Required) Subnet to use for nodes (string)
1055+
* `ovs_memory_limit` - (Optional) OVS memory limit (string)
1056+
* `opflex_log_level` - (Optional) Log level for ACI opflex (string)
1057+
* `opflex_client_ssl` - (Optional) Whether to use client SSL for Opflex (string)
1058+
* `opflex_device_delete_timeout` - (Optional) Opflex device delete timeout (string)
1059+
* `opflex_mode` - (Optional) Opflex mode (string)
1060+
* `opflex_server_port` - (Optional) Opflex server port (string)
1061+
* `overlay_vrf_name` - (Optional) Overlay VRF name (string)
1062+
* `pbr_tracking_non_snat` - (Optional) Policy-based routing tracking non snat (string)
1063+
* `pod_subnet_chunk_size` - (Optional) Pod subnet chunk size (string)
1064+
* `run_gbp_container` - (Optional) Whether to run GBP container (string)
1065+
* `run_opflex_server_container` - (Optional) Whether to run Opflex server container (string)
1066+
* `node_svc_subnet` - (Required) Subnet to use for service graph (string)
1067+
* `service_monitor_interval` - (Optional) Service monitor interval (string)
1068+
* `service_vlan` - (Required) The VLAN used by LoadBalancer services (string)
1069+
* `snat_contract_scope` - (Optional) Snat contract scope (string)
1070+
* `snat_namespace` - (Optional) Snat namespace (string)
1071+
* `snat_port_range_end` - (Optional) End of snat port range (string)
1072+
* `snat_port_range_start` - (Optional) End of snat port range (string)
1073+
* `snat_ports_per_node` - (Optional) Snat ports per node (string)
1074+
* `sriov_enable` - (Optional) Whether to enable SR-IOV (string)
1075+
* `extern_static` - (Required) Subnet to use for static external IPs (string)
1076+
* `subnet_domain_name` - (Optional) Subnet domain name (string)
1077+
* `system_id` - (Required) ACI system ID (string)
1078+
* `tenant` - (Optional) ACI tenant (string)
1079+
* `token` - (Required/Sensitive) ACI token (string)
1080+
* `use_aci_anywhere_crd` - (Optional) Whether to use ACI anywhere CRD (string)
1081+
* `use_aci_cni_priority_class` - (Optional) Whether to use ACI CNI priority class (string)
1082+
* `use_cluster_role` - (Optional) Whether to use cluster role (string)
1083+
* `use_host_netns_volume` - (Optional) Whether to use host netns volume (string)
1084+
* `use_opflex_server_volume` - (Optional) Whether use Opflex server volume (string)
1085+
* `use_privileged_container` - (Optional) Whether ACI containers should run as privileged (string)
1086+
* `vrf_name` - (Required) VRF name (string)
1087+
* `vrf_tenant` - (Required) VRF tenant (string)
1088+
* `vmm_controller` - (Optional) VMM controller configuration (string)
1089+
* `vmm_domain` - (Optional) VMM domain configuration (string)
1090+
10111091
##### `calico_network_provider`
10121092

10131093
###### Arguments

0 commit comments

Comments
 (0)