description: A highly-available, production-grade Kubernetes cluster.
  June 26, 2019 - charmed-kubernetes-139. Kubernetes version1.15.x
series: bionic
services:
  easyrsa:
    annotations:
      gui-x: '450'
      gui-y: '550'
    charm: cs:~containers/easyrsa-254
    constraints: root-disk=8G spaces=public zones=us-east-2a,us-east-2b
    num_units: 1
    to:
     - kubernetes-master
  etcd: #should be in private subnet 
    annotations:
      gui-x: '800'
      gui-y: '550'
    charm: cs:~containers/etcd-433
    constraints: root-disk=8G spaces=public zones=us-east-2a,us-east-2b instance-type=t2.medium
    num_units: 3
    # options:
    #   channel: 3.2/stable
    # resources:
    #   core: 0
    #   etcd: 3
    #   snapshot: 0
  flannel:
    annotations:
      gui-x: '450'
      gui-y: '750'
    charm: cs:~containers/flannel-425
    # resources:
    #   flannel-amd64: 323
    #   flannel-arm64: 319
    #   flannel-s390x: 306
  kubeapi-load-balancer:  #need for HA only, nginx load balancer
    annotations:
      gui-x: '450'
      gui-y: '250'
    charm: cs:~containers/kubeapi-load-balancer-648
    constraints: spaces=public zones=us-east-2a,us-east-2b root-disk=8G instance-type=t2.micro 
    expose: true  
    num_units: 1
    # resources: {}
  kubernetes-master:
    annotations:
      gui-x: '800'
      gui-y: '850'
    charm: cs:~containers/kubernetes-master-699
    constraints: root-disk=16G spaces=public zones=us-east-2a,us-east-2b instance-type=t2.large 
    expose: true
    num_units: 1 #default 2
    install_sources:
    # options:
    #   channel: 1.15/stable
    # # resources:
    #   cdk-addons: 0
    #   core: 0
    #   kube-apiserver: 0
    #   kube-controller-manager: 0
    #   kube-proxy: 0
    #   kube-scheduler: 0
    #   kubectl: 0
  kubernetes-worker-docker:
    charm: cs:~containers/kubernetes-worker
    constraints: root-disk=16G spaces=public zones=us-east-2a,us-east-2b instance-type=t2.large 
    num_units: 3
  docker:
    charm: cs:~containers/docker-1
    options:
      docker-opts: "--insecure-registry "
      #docker-logins: '[{"server": "http://artifactory2.mysite.com", "username": "admin", "password": "nomypassword"},{"server": "http://artifactory.mysite.com", "username": "admin", "password": "nomypassword"},{"server": "https://artifactory4.mysite.com", "username": "admin", "password": "nomypassword"}]'
relations:
- - kubernetes-master:kube-api-endpoint
  - kubeapi-load-balancer:apiserver
- - kubernetes-master:loadbalancer
  - kubeapi-load-balancer:loadbalancer
- - kubernetes-master:certificates
  - easyrsa:client
- - etcd:certificates
  - easyrsa:client
- - kubernetes-master:etcd
  - etcd:db
- - kubeapi-load-balancer:certificates
  - easyrsa:client
- - flannel:etcd
  - etcd:db
- - flannel:cni
  - kubernetes-master:cni
- - docker:docker
  - kubernetes-worker-docker:container-runtime
- - docker:docker
  - kubernetes-master:container-runtime
- - flannel:cni
  - kubernetes-worker-docker:cni
- - kubernetes-worker-docker:certificates
  - easyrsa:client
- - kubernetes-worker-docker:kube-api-endpoint
  - kubeapi-load-balancer:website
- - kubernetes-master:kube-control
  - kubernetes-worker-docker:kube-control