runbooks-ansible/ansible/roles/k3s/vars/main.yaml

---
#k3s_version: v1.30.4+k3s1
k3s_version: "{{ lookup('env', 'k3s_version') }}"
ansible_user: administrator
systemd_dir: /etc/systemd/system

# Set your timezone
system_timezone: "America/Chicago"

# interface which will be used for flannel
flannel_iface: "eth0"

# apiserver_endpoint is virtual ip-address which will be configured on each master
apiserver_endpoint: "{{ lookup('env','api_endpoint') }}"

# k3s_token is required  masters can talk together securely
k3s_token: "{{ lookup('env','k3s_token') }}"

# The IP on which the node is reachable in the cluster.
# Here, a sensible default is provided, you can still override
# it for each of your hosts, though.
k3s_node_ip: '{{ ansible_facts[flannel_iface]["ipv4"]["address"] }}'

# Disable the taint manually by setting: k3s_master_taint = false
k3s_master_taint: "{{ true if groups['node_group'] | default([]) | length >= 1 else false }}"

# these arguments are recommended for servers as well as agents:
extra_args: >-
  --flannel-iface={{ flannel_iface }}
  --node-ip={{ k3s_node_ip }}

# change these to your liking, the only required are: --disable servicelb, --tls-san {{ apiserver_endpoint }}
extra_server_args: >-
  {{ extra_args }}
  {{ '--node-taint node-role.kubernetes.io/master=true:NoSchedule' if k3s_master_taint else '' }}
  --tls-san {{ apiserver_endpoint }}
  --disable servicelb
  --disable traefik
  --kube-controller-manager-arg bind-address=0.0.0.0
  --kube-proxy-arg metrics-bind-address=0.0.0.0
  --kube-scheduler-arg bind-address=0.0.0.0
  --etcd-expose-metrics true
  --kubelet-arg containerd=/run/k3s/containerd/containerd.sock
extra_agent_args: >-
  {{ extra_args }}  
  --kubelet-arg node-status-update-frequency=5s

# image tag for kube-vip
kube_vip_tag_version: "v0.7.2"

username: "administrator"

environment: "{{ lookup('env','ENVIRONMENT_NAME') }}"
master_group: "{{ (cluster | regex_replace('-cluster$', '')) ~ '-master' }}"
node_group: "{{ (cluster | regex_replace('-cluster$', '')) ~ '-node' }}"