credentials:
  user: sre-admin
  ask_sudo_password: false
  private_key_file: /home/sre-admin/.ssh/id_rsa

hosts:
  - hostname: vbox-prod-k8s-master-01
    ip: "10.250.50.22"
    roles: [control_plane, etcd]
  - hostname: vbox-prod-k8s-slave-01
    ip: "10.250.50.23"
    roles: [node]
  - hostname: vbox-prod-k8s-slave-02
    ip: "10.250.50.21"
    roles: [node]

orchestrator:
  version: v1.29.0
  container_engine:
    install: true
  ping_access_ip: true
  auto_renew_certificates: true
  pod_security_policy_enabled: true

modules:
  admin_password: changeit
  observability:
    enabled: true
    logging:
      enabled: true
      events:
        enabled: true
    tracing:
      enabled: true
    monitoring:
      enabled: true
      alert_manager:
        enabled: true
        route:
          receiver: kvazaric_notifications
          group_wait: 1s
          repeat_interval: 180m
          routes:
            - receiver: "kvazaric_notifications"
              group_by: ["alertname"]
              group_wait: 1s
              repeat_interval: 8737h
              matchers:
                - fireOnce=true
        receivers:
          - name: kvazaric_notifications
            telegram_configs:
              - send_resolved: true
                api_url: https://api.telegram.org
                bot_token: bot_token
                chat_id: -10000
                parse_mode: HTML
                message: '{% raw %}{{ "{{" }} template "default-message" . {{ "}}" }}{% endraw %}'
                http_config:
                  follow_redirects: true
                  enable_http2: false
      blackbox:
        enabled: true
      kube_state:
        enabled: true
      node:
        enabled: true
    visualization:
      enabled: true
      grafana:
        enabled: true
        expose:
          type: ingress # ingress or NodePort
          domain: grafana.disk.lt.t1.cloud
          # path: "/grafana"
          tls:
            enabled: true

  cicd:
    enabled: true
    argo_cd:
      expose:
        type: ingress # ingress or NodePort
        domain: argocd.disk.lt.t1.cloud
        # path: "/cicd"
        tls:
          enabled: true
    rollouts:
      enabled: true
    updates_operator:
      enabled: true

  secrets_storage:
    enabled: true
    key_shares: 5
    key_threshold: 3
    expose:
      type: ingress # ingress or NodePort
      domain: vault.disk.lt.t1.cloud
      tls:
        enabled: true
    csi_integration:
      enabled: true

  registry:
    enabled: true
    expose:
      type: ingress # ingress or nodePort
      domain: harbor.disk.lt.t1.cloud
    tls:
      enabled: true
    enabled_scanner: true

  additional:
    cert_manager:
      enabled: true
      account_email: adminmail@gmail.com
    ingress:
      enabled: true
      host_network: true
    storage:
      longhorn:
        enabled: true
      secrets_store_csi_driver:
        enabled: true