domain: cluster.local

subnets:
  services: 192.168.48.0/20
  pods: 192.168.64.0/20

addons:
- essentials

vars:
  kubernetes_version: v1.26.4

  bootstrap_auths:
  - name: "my-user"
    sshKey: "ssh-ed25519 xxx my-user"

  ssh_keys:
  - "ssh-ed25519 xxx my-user"

  devname_match: /dev/([shv]da|nmve[0-9]+n[0-9]+)
  # to match a specific partition (here: 3):
  #devname_match: /dev/([shv]da|nvme[0-9]+n[0-9]+p)3

  vip_interface: main
  public_vip: 172.17.1.138

  netmask: 24
  gateway: 172.17.1.8
  dns:
  - 172.17.1.1

  etcd:
    image: quay.io/coreos/etcd
    version: v3.5.9
    cluster_state: new # set to existing to secure existing clusters

  keepalived:
    image: novitnc/keepalived
    version: 2.0.19
    garp_master_refresh: 60
    router_id: 1

  control_plane:
    api_port: 6443
    reserve_resources: true

  iface: "(en|eth).*"
  containerd_size: 50%FREE

  local_storage_class: local

  encrypt_disks: false

  cni_provider: knet-wg
  ingress_controller: nginx
  kube_proxy: proxy

  k8s_registry: registry.k8s.io

  kernel_modules: []