version: ${version}
debug: false
persist: true

machine:
  type: worker
  token: ${token}
  ca:
    crt: ${ca_crt}
  certSANs:
    - ${lan_ip}
  network:
    hostname: ${hostname}
    interfaces:
      - interface: ${network_interface}
        addresses:
          - ${lan_ip}/24
        routes:
          - network: 0.0.0.0/0
            gateway: ${lan_gateway}
        dhcp: false
        dhcpOptions:
          ipv6: false
    nameservers:
%{ for ns in dns_servers ~}
      - ${ns}
%{ endfor ~}
    extraHostEntries:
      - ip: ${forgejo_registry_ip}
        aliases:
          - ${forgejo_hostname}
  kubelet:
    image: ${kubelet_image}
    defaultRuntimeSeccompProfileEnabled: true
    disableManifestsDirectory: true
    clusterDNS:
      - ${cluster_dns_ip}
    extraArgs:
      rotate-server-certificates: true
    extraConfig:
      memorySwap:
        swapBehavior: LimitedSwap
    nodeIP:
      validSubnets:
        - 192.168.1.0/24
  install:
    disk: ${install_disk}
    image: ${factory_image}
    wipe: true
    grubUseUKICmdline: true
  disks:
%{ for disk in extra_disks ~}
    - device: ${disk.device}
      partitions:
        - mountpoint: ${disk.mountpoint}
%{ endfor ~}
  features:
    kubePrism:
      enabled: true
      port: 7445
    hostDNS:
      enabled: false
  nodeLabels:
    topology.kubernetes.io/region: homelab
    topology.kubernetes.io/zone: ${zone}
%{ if gpu_count > 0 ~}
    nvidia.com/gpu: "true"
    gpu-count: "${gpu_count}"
%{ endif ~}

cluster:
  id: ${cluster_id}
  secret: ${cluster_secret}
  controlPlane:
    endpoint: https://${controlplane_ip}:6443
  clusterName: ${cluster_name}
  network:
    dnsDomain: ${dns_domain}
    podSubnets:
%{ for subnet in pod_subnets ~}
      - ${subnet}
%{ endfor ~}
    serviceSubnets:
%{ for subnet in service_subnets ~}
      - ${subnet}
%{ endfor ~}
    cni:
      name: none
  token: ${bootstrap_token}
  secretboxEncryptionSecret: ${secretbox_encryption_secret}
  ca:
    crt: ${kubernetes_ca_crt}
  discovery:
    enabled: true
    registries:
      kubernetes:
        disabled: true
      service: {}
%{ if swap_size != "" ~}
---
apiVersion: v1alpha1
kind: VolumeConfig
name: EPHEMERAL
provisioning:
  diskSelector:
    match: disk.transport == "nvme"
  maxSize: ${ephemeral_max_size}
  grow: false
---
apiVersion: v1alpha1
kind: SwapVolumeConfig
name: swap1
provisioning:
  diskSelector:
    match: disk.transport == "nvme"
  minSize: ${swap_size}
  maxSize: ${swap_size}
%{ endif ~}