k8s_version: "1.29"
kubectl_version: "1.29.0"

# load balancer configuration
lb_provider: "metallb"
lb_ips: "10.2.0.40-10.2.0.49"
lb_http_port: 80
lb_https_port: 443
metallb_version: 0.14.5

# certificate manager
issuer_email: webmaster@localhost.localdomain
certmgr_version: 1.14.5

# microk8s specific
microk8s_channel: "{{ k8s_version }}/stable"
microk8s_privileged: true
microk8s_alt_names: "localhost.localdomain"
microk8s_status_timeout: 300

k8s_users: []

k8s_host_public_ip: "{{ ansible_default_ipv4.address }}"

k8s_net_devices:
  - "cni+"
  - "flannel+"

k8s_incoming_traffic:
  - { rule: "allow", port: "16443", proto: "tcp", from: "10.1.0.0/16" }
  - { rule: "allow", port: "10254", proto: "tcp", from: "10.1.0.0/16" }
  - { rule: "allow", port: "10254", proto: "tcp", from: "{{ k8s_host_public_ip }}" }

k8s_outgoing_traffic: []

k8s_allowed_hosts: []

k8s_iac_user: "provision"