---
kubernetes_node_name: "{{ inventory_hostname | replace('ch-', '') }}"

kubernetes_version: 1.27.1
kubernetes_cri_tools_pkg_version: 1.26.0-00
kubernetes_container_runtime: containerd
containerd_pkg_provider: docker-com


kubernetes:
  cluster_name: chtest

  dedicated_controlplane_nodes: no
  api_extra_sans:
  - 192.168.28.21
  - 192.168.28.22
  - 192.168.28.29

  pod_ip_range: 172.18.0.0/16
  pod_ip_range_size: 24
  service_ip_range: 172.18.192.0/18

kubernetes_secrets:
  encryption_config_keys: "{{ vault_kubernetes_encryption_config_keys }}"


### Kube-Router
#
#kubernetes_network_plugin: kube-router
#kubernetes_network_plugin_version: 1.5.1
#kubernetes_network_plugin_replaces_kube_proxy: yes
#kubernetes_enable_nodelocal_dnscache: yes

### kubeguard
#
#kubernetes_network_plugin: kubeguard
#kubernetes_network_plugin_replaces_kube_proxy: no
#kubernetes_kube_proxy_mode: ipvs
#kubernetes_enable_nodelocal_dnscache: yes
#kubeguard:
#  ## Mind that pod_ip_range and service_ip_range overlap and kubeguard
#  ## needs a /24 for addresses assigned to tunnel devices. This means that
#  ## node_indeces must be in the range between 1 and 191 -> 190 hosts possible
#  ##
#  ## hardcoded hostnames are not nice but if we do this via host_vars
#  ## the info is spread over multiple files and this makes it more diffcult
#  ## to find mistakes, so it is nicer to keep it in one place...
#  node_index:
#    ch-calypso: 125
#    ch-thetys: 126
#    ch-k8s-ctrl: 127
#kubernetes_overlay_node_ip: "{{ kubernetes.pod_ip_range | ansible.utils.ipsubnet(kubernetes.pod_ip_range_size, kubeguard.node_index[inventory_hostname]) | ansible.utils.ipaddr(1) | ansible.utils.ipaddr('address') }}"

### Cilium
#
kubernetes_network_plugin: cilium
kubernetes_network_plugin_version: 1.13.2
kubernetes_network_plugin_replaces_kube_proxy: yes
kubernetes_enable_nodelocal_dnscache: yes
kubernetes_cilium_config:
  ipam: kubernetes
  tunnel: disabled
  ipv4-native-routing-cidr: 192.168.28.0/24
  auto-direct-node-routes: yes
  enable-local-redirect-policy: yes
base_sysctl_config_user:
  net.ipv4.conf.all.rp_filter: 0
  net.ipv4.conf.default.rp_filter: 0

### None
#
#kubernetes_network_plugin: none
#kubernetes_network_plugin_replaces_kube_proxy: yes
#kubernetes_enable_nodelocal_dnscache: no


kubernetes_metrics_server_version: 0.6.3