---
kubernetes:
  ipPool:
    ipv4:
      # Minimum: /24
      cluster_cidr: 10.42.0.0/16
      service_cidr: 10.43.0.0/16
    ipv6:
      # Minimum: /120
      cluster_cidr: fd42::/112
      service_cidr: fd43::/112

    # Interface to grab node-IPv4/v6 from
    nodeIp_interface: <interface to grab nodeIp from>

  control_plane:
    dns_name: <control-plane dns-reachable-name>

  token: <shared token for nodes to join>

  network:
    # Copies the current /etc/resolv.conf whilst only keeping "nameserver" lines
    #  can be used to remove filter
    clean_resolv_conf: false

    # One of [none, flannel, calico, cilium]
    plugin: calico

    # Helper for networking
    helper:
      # https://github.com/Ruakij/RoutingTableToWg
      #  Translates received-routes from e.g. BGP to wireguard-allowedips
      #  Helpful, when nodeIp_interface is a wireguard-interface
      routingtabletowg: false

  # One of [none, traefik-ingress, nginx-ingress]
  ingress_controller: traefik-ingress

  # k3s version to install, e.g. v1.37.1+k3s1. An installed k3s is replaced only
  # when this is set and differs; empty installs the latest when k3s is missing.
  version: ""

  # KubeletConfiguration fields (evictionHard, evictionSoft, ...) written to
  # /etc/rancher/k3s/kubelet.conf.d/20-memory.conf; empty writes no file
  kubelet_memory: {}

  # KubeletConfiguration fields systemReserved and kubeReserved written to
  # /etc/rancher/k3s/kubelet.conf.d/30-reserved.conf; empty writes no file.
  # Both only shrink the allocatable of the node (enforceNodeAllocatable stays
  # pods). Sized per node in host_vars from the measured memory and CPU of
  # k3s.service (kubeReserved) and of everything else outside kubepods.slice
  # (systemReserved).
  kubelet_reserved: {}

  # Extra config of the nodes running etcd, left out with disable-etcd
  etcd_config_extra:
    # Without it etcd serves metrics on 127.0.0.1 only, out of reach of vmagent
    etcd-expose-metrics: true

  config_extra:
    # etcd-tuning
    #  heartbeat: 0.5-1.5x of rtt
    #  election:  10x- of heartbeat
    etcd-arg:
      heartbeat-interval: 500
      election-timeout: 5000

  registries_config:
    # Defines the names and endpoints of registries
    #  When embedded-registry is enabled, every registry needs to be defined here to allow this node to distribute those images.
    #mirrors:
      # Enable distribution for all registries
      #"*": {}
    
    # Defines authentication and extra settings for the registries
    #config: