---
k3s_version: 1.25.3+k3s1

k3s_packages:
  - epel-release
  - python3-kubernetes
  - container-selinux
  - selinux-policy-base

k3s_packages_extra: []

k3s_reset: False
k3s_token: "secure-token"
k3s_node_name: "{{ ansible_hostname }}"
k3s_node_ip: "{{ ansible_default_ipv4.address }}"
k3s_init_log_enabled: False
k3s_selinux_enabled: False
k3s_protect_kernel_defaults: False

k3s_server: True
k3s_server_bind_ip: "0.0.0.0"
k3s_server_nodes:
  - "{{ ansible_hostname }}"
k3s_server_flannel_backend_enabled: True
k3s_server_network_policy_enabled: True
k3s_server_cloud_controller_enabled: True
k3s_server_kube_proxy_enabled: True
k3s_server_workload_enabled: True
k3s_server_feature_gates: []

k3s_server_components_disabled:
  - traefik

k3s_server_manifests_templates: []
k3s_server_manifests_urls: []

k3s_server_admission_plugins:
  - NodeRestriction
  - EventRateLimit
  - ServiceAccount
  - NamespaceLifecycle

k3s_server_admission_configuration:
  - name: EventRateLimit
    configuration:
      kind: Configuration
      apiVersion: eventratelimit.admission.k8s.io/v1alpha1
      limits:
        - type: Namespace
          qps: 50
          burst: 100
          cacheSize: 2000
        - type: User
          qps: 10
          burst: 50

k3s_server_resource_creations: []
k3s_server_resource_patches: []

k3s_node_labels: {}

k3s_iscsi_enabled: False