---
k8s::role: server
k8s::server::node_on_server: false
k8s::server::manage_kubeadm: true
k8s::server::apiserver::advertise_address: "%{facts.networking.ip}"

consul::services:
  k8s:
    service_name: 'k8s'
    tags:
      - 'containers'
      - 'k8s'
      - 'kubernetes'
    address: "%{facts.networking.ip}"
    port: 6443
    checks:
      - id: 'k8s_tcp_check'
        name: 'K8S TCP Check'
        tcp: "%{facts.networking.fqdn}:6443"
        interval: '10s'
        timeout: '1s'
profiles::consul::client::node_rules:
  - resource: service
    segment: k8s
    disposition: write

# additional altnames
profiles::pki::vault::alt_names:
  - k8s.service.consul
  - k8s.query.consul