Encryption and major changes

ansible/roles/microk8s/defaults/main.yml

@@ -1,38 +1,41 @@
-k8s_version: "1.29"
-kubectl_version: "1.29.0"
+microk8s_k8s_version: "1.29"
+microk8s_kubectl_version: "1.29.0"
 
 # load balancer configuration
-lb_provider: "metallb"
-lb_ips: "10.2.0.40-10.2.0.49"
-lb_http_port: 80
-lb_https_port: 443
-metallb_version: 0.14.5
+microk8s_lb_provider: "metallb"
+microk8s_lb_ips: "10.2.0.40-10.2.0.49"
+microk8s_lb_http_port: 80
+microk8s_lb_https_port: 443
+microk8s_metallb_version: 0.14.5
 
 # certificate manager
-issuer_email: webmaster@localhost.localdomain
-certmgr_version: 1.14.5
+microk8s_issuer_email: webmaster@localhost.localdomain
+microk8s_certmgr_version: 1.14.5
 
 # microk8s specific
-microk8s_channel: "{{ k8s_version }}/stable"
+microk8s_channel: "{{ microk8s_k8s_version }}/stable"
 microk8s_privileged: true
 microk8s_alt_names: "localhost.localdomain"
 microk8s_status_timeout: 300
 
-k8s_users: []
+microk8s_users: []
 
-k8s_host_public_ip: "{{ ansible_default_ipv4.address }}"
+microk8s_host_public_ip: "{{ ansible_default_ipv4.address }}"
 
-k8s_net_devices:
+microk8s_net_devices:
   - "cni+"
   - "flannel+"
 
-k8s_incoming_traffic:
+microk8s_incoming_traffic:
   - { rule: "allow", port: "16443", proto: "tcp", from: "10.1.0.0/16" }
   - { rule: "allow", port: "10254", proto: "tcp", from: "10.1.0.0/16" }
-  - { rule: "allow", port: "10254", proto: "tcp", from: "{{ k8s_host_public_ip }}" }
+  - { rule: "allow", port: "10254", proto: "tcp", from: "{{ microk8s_host_public_ip }}" }
 
-k8s_outgoing_traffic: []
+microk8s_outgoing_traffic: []
 
-k8s_allowed_hosts: []
+microk8s_allowed_hosts: []
 
-k8s_iac_user: "provision"
+microk8s_iac_user: "provision"
+
+microk8s_encryption_secret: "a13labs"
+microk8s_encryption_cfg: "/etc/microk8s_encryption.yaml"