---
k3s_version: 1.28.6+k3s2

k3s_packages:
  - epel-release
  - python3-kubernetes
  - container-selinux
  - selinux-policy-base

k3s_packages_extra: []

k3s_reset: False
k3s_token: "secure-token"
k3s_node_name: "{{ ansible_hostname }}"
k3s_node_ip:
  - "{{ ansible_default_ipv4.address }}"
k3s_init_log_enabled: False
k3s_selinux_enabled: False
k3s_protect_kernel_defaults: False

k3s_server: True
k3s_server_bind_ip: "0.0.0.0"
k3s_server_cluster_domain: "cluster.local"
k3s_server_cluster_cidr:
  - "10.42.0.0/16"
k3s_server_service_cidr:
  - "10.43.0.0/16"
k3s_server_service_node_port_range: "30000-32767"
k3s_server_cluster_dns: "10.43.0.10"
k3s_server_nodes:
  - "{{ ansible_hostname }}"
k3s_server_flannel_backend_enabled: True
k3s_flannel_ipv6_masq_enabled: False
# @var k3s_flannel_external_ip:value: $ "_unset_"
k3s_server_network_policy_enabled: True
k3s_server_cloud_controller_enabled: True
k3s_server_kube_proxy_enabled: True
k3s_server_workload_enabled: True
k3s_server_feature_gates: []

k3s_server_components_disabled:
  - traefik

k3s_server_manifests_templates: []
k3s_server_manifests_urls: []

k3s_server_admission_plugins:
  - NodeRestriction
  - EventRateLimit
  - ServiceAccount
  - NamespaceLifecycle

k3s_server_admission_configuration:
  - name: EventRateLimit
    configuration:
      kind: Configuration
      apiVersion: eventratelimit.admission.k8s.io/v1alpha1
      limits:
        - type: Namespace
          qps: 50
          burst: 100
          cacheSize: 2000
        - type: User
          qps: 10
          burst: 50

k3s_server_resource_creations: []
k3s_server_resource_patches: []

k3s_node_labels: {}

k3s_iscsi_enabled: False