microk8s_k8s_version: "1.29"
microk8s_kubectl_version: "1.29.0"

# load balancer configuration
microk8s_lb_provider: "metallb"
microk8s_lb_ips: "10.2.0.40-10.2.0.49"
microk8s_lb_http_port: 80
microk8s_lb_https_port: 443
microk8s_metallb_version: 0.14.5

# certificate manager
microk8s_issuer_email: webmaster@localhost.localdomain
microk8s_certmgr_version: 1.14.5

# microk8s specific
microk8s_channel: "{{ microk8s_k8s_version }}/stable"
microk8s_privileged: true
microk8s_alt_names: "localhost.localdomain"
microk8s_status_timeout: 300

microk8s_users: []

microk8s_host_public_ip: "{{ ansible_default_ipv4.address }}"

microk8s_net_devices:
  - "cni+"
  - "flannel+"

microk8s_incoming_traffic:
  - { rule: "allow", port: "16443", proto: "tcp", from: "10.1.0.0/16" }
  - { rule: "allow", port: "10254", proto: "tcp", from: "10.1.0.0/16" }
  - { rule: "allow", port: "10254", proto: "tcp", from: "{{ microk8s_host_public_ip }}" }

microk8s_outgoing_traffic: []

microk8s_allowed_hosts: []

microk8s_iac_user: "provision"

microk8s_encryption_secret: "a13labs"
microk8s_encryption_cfg: "/etc/microk8s_encryption.yaml"