.

templates/k8s_cluster/cluster/calico.conf.j2

@@ -0,0 +1,2 @@
+[keyfile]
+unmanaged-devices=interface-name:cali*;interface-name:tunl*;interface-name:vxlan.calico;interface-name:wireguard.cali

templates/k8s_cluster/cluster/clusterConfiguration.yml.j2

@@ -0,0 +1,35 @@
+apiVersion: kubeadm.k8s.io/v1beta3
+kind: InitConfiguration
+localAPIEndpoint:
+  advertiseAddress: '{{ hostvars['k8s-master-1'].ansible_host }}'
+  bindPort: 6443
+---
+apiVersion: kubeadm.k8s.io/v1beta3
+kind: ClusterConfiguration
+kubernetesVersion: 'v{{ kubernetesVersion.split("-")[0] }}'
+apiServer:
+  extraArgs:
+    authorization-mode: Node,RBAC
+  timeoutForControlPlane: 4m0s
+certificatesDir: /etc/kubernetes/pki
+clusterName: '{{ kubernetesClusterName }}'
+controlPlaneEndpoint: '{{ kubernetesApi }}:6443'
+controllerManager:
+  extraArgs:
+    bind-address: 0.0.0.0
+dns: {}
+etcd:
+  local:
+    dataDir: /var/lib/etcd
+    extraArgs:
+      listen-metrics-urls: http://0.0.0.0:2381
+networking:
+  dnsDomain: cluster.local
+  serviceSubnet: 10.96.0.0/12
+scheduler:
+  extraArgs:
+    bind-address: 0.0.0.0
+---
+apiVersion: kubeproxy.config.k8s.io/v1alpha1
+kind: KubeProxyConfiguration
+metricsBindAddress: 0.0.0.0

templates/k8s_cluster/cluster/joinController.yml.j2

@@ -0,0 +1,15 @@
+apiVersion: kubeadm.k8s.io/v1beta3
+kind: JoinConfiguration
+discovery:
+  bootstrapToken:
+    apiServerEndpoint: {{ kubernetesApi }}:6443
+    caCertHashes:
+    - sha256:{{ hostvars['k8s-master-1']['certsha256'] }}
+    token: {{ hostvars['k8s-master-1']['token'] }}
+nodeRegistration:
+  kubeletExtraArgs:
+    node-ip: {{ ansible_host }}
+controlPlane:
+  localAPIEndpoint:
+    advertiseAddress: {{ ansible_host }}
+  certificateKey: {{ hostvars['k8s-master-1']['certskey'] }}