feat: add advanced features to config (#1208)

* feat: add advanced features to config Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: only enable longhorn if distro is k3s or k0s Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update ansible lint Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-20 12:27:20 -05:00
1 parent 0fda1f6a56
commit 1ec59d1559
@@ -1,5 +1,6 @@
-#% if bootstrap_distribution == 'k3s' or bootstrap_distribution == 'k0s' %#
+#% if bootstrap_distribution in ['k3s', 'k0s'] %#
 skip_list:
  - jinja[spacing]
  - yaml[commas]
  - yaml[line-length]
  - var-naming
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == 'k3s' or bootstrap_distribution == 'k0s' %#
+#% if bootstrap_distribution in ['k3s', 'k0s'] %#
 ---
 timezone: "#{ bootstrap_timezone }#"
 github_username: "#{ bootstrap_github_username }#"
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == 'k3s' or bootstrap_distribution == 'k0s' %#
+#% if bootstrap_distribution in ['k3s', 'k0s'] %#
 ---
 kubernetes:
  children:
@@ -62,6 +62,7 @@
              ff02::2 ip6-allrouters
            dest: /etc/hosts
            mode: preserve
        #% if bootstrap_advanced_flags|default({}) and bootstrap_advanced_flags.update_resolv_conf|default(true) %#
        # https://github.com/onedr0p/flux-cluster-template/discussions/635
        - name: Network Configuration | Remove immutable flag from /etc/resolv.conf
          ansible.builtin.file:
@@ -80,6 +81,7 @@
            content: |
              search .
              nameserver #{ bootstrap_dns_server|default('1.1.1.1', true) }#
        #% endif %#
    - name: System Configuration
      notify: Reboot
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == 'k3s' or bootstrap_distribution == 'k0s' %#
+#% if bootstrap_distribution in ['k3s', 'k0s'] %#
 ---
 - name: Reboot
  hosts: kubernetes
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == 'k3s' or bootstrap_distribution == 'k0s' %#
+#% if bootstrap_distribution in ['k3s', 'k0s'] %#
 ---
 # https://github.com/kevincoakley/ansible-role-k8s-rolling-update
 - name: Cluster rollout update
@@ -1,4 +1,4 @@
-#% if discord_template_notifier.enabled | default(false) %#
+#% if discord_template_notifier|default({}) and discord_template_notifier.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if discord_template_notifier.enabled | default(false) %#
+#% if discord_template_notifier|default({}) and discord_template_notifier.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if discord_template_notifier.enabled | default(false) %#
+#% if discord_template_notifier|default({}) and discord_template_notifier.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: Secret
@@ -1,4 +1,4 @@
-#% if discord_template_notifier.enabled | default(false) %#
+#% if discord_template_notifier|default({}) and discord_template_notifier.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if homepage.enabled | default(false) %#
+#% if homepage|default({}) and homepage.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: ConfigMap
@@ -1,4 +1,4 @@
-#% if homepage.enabled | default(false) %#
+#% if homepage|default({}) and homepage.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if homepage.enabled | default(false) %#
+#% if homepage|default({}) and homepage.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if homepage.enabled | default(false) %#
+#% if homepage|default({}) and homepage.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: Secret
@@ -1,4 +1,4 @@
-#% if homepage.enabled | default(false) %#
+#% if homepage|default({}) and homepage.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -3,9 +3,9 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  - ./namespace.yaml
-  #% if homepage.enabled | default(false) %#
+  #% if homepage|default({}) and homepage.enabled|default(false) %#
  - ./homepage/ks.yaml
  #% endif %#
-  #% if discord_template_notifier.enabled | default(false) %#
+  #% if discord_template_notifier|default({}) and discord_template_notifier.enabled|default(false) %#
  - ./discord-template-notifier/ks.yaml
  #% endif %#
@@ -4,6 +4,6 @@ kind: Kustomization
 resources:
  - ./namespace.yaml
  - ./addons/ks.yaml
-  #% if weave_gitops.enabled | default(false) %#
+  #% if weave_gitops|default({}) and weave_gitops.enabled|default(false) %#
  - ./weave-gitops/ks.yaml
  #% endif %#
@@ -1,4 +1,4 @@
-#% if weave_gitops.enabled | default(false) %#
+#% if weave_gitops|default({}) and weave_gitops.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -31,7 +31,7 @@ spec:
    ingress:
      enabled: true
      className: internal
-      #% if homepage.enabled | default(false) %#
+      #% if homepage|default({}) and homepage.enabled|default(false) %#
      annotations:
        gethomepage.dev/enabled: "true"
        gethomepage.dev/group: Home
@@ -1,4 +1,4 @@
-#% if weave_gitops.enabled | default(false) %#
+#% if weave_gitops|default({}) and weave_gitops.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if weave_gitops.enabled | default(false) %#
+#% if weave_gitops|default({}) and weave_gitops.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: Secret
@@ -1,4 +1,4 @@
-#% if weave_gitops.enabled | default(false) %#
+#% if weave_gitops|default({}) and weave_gitops.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -8,6 +8,6 @@ resources:
  - ./kubelet-csr-approver/ks.yaml
  #% endif %#
  - ./metrics-server/ks.yaml
-  #% if (bootstrap_distribution == "k0s" or bootstrap_distribution == "talos") and spegel.enabled | default(false) %#
+  #% if bootstrap_distribution in ['k0s', 'talos'] and spegel|default({}) and spegel.enabled|default(false) %#
  - ./spegel/ks.yaml
  #% endif %#
@@ -1,4 +1,4 @@
-#% if (bootstrap_distribution == "k0s" or bootstrap_distribution == "talos") and spegel.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'talos'] and spegel|default({}) and spegel.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if (bootstrap_distribution == "k0s" or bootstrap_distribution == "talos") and spegel.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'talos'] and spegel|default({}) and spegel.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if (bootstrap_distribution == "k0s" or bootstrap_distribution == "talos") and spegel.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'talos'] and spegel|default({}) and spegel.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: storage.k8s.io/v1
 kind: StorageClass
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: Namespace
@@ -70,7 +70,7 @@ spec:
        className: external
        annotations:
          external-dns.alpha.kubernetes.io/target: "external.${SECRET_DOMAIN}"
-          #% if homepage.enabled | default(false) %#
+          #% if homepage|default({}) and homepage.enabled|default(false) %#
          gethomepage.dev/enabled: "true"
          gethomepage.dev/group: Network
          gethomepage.dev/name: Echo Server
@@ -1,4 +1,4 @@
-#% if grafana.enabled | default(false) %#
+#% if grafana|default({}) and grafana.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -159,7 +159,7 @@ spec:
    ingress:
      enabled: true
      ingressClassName: internal
-      #% if homepage.enabled | default(false) %#
+      #% if homepage|default({}) and homepage.enabled|default(false) %#
      annotations:
        gethomepage.dev/enabled: "true"
        gethomepage.dev/icon: grafana.png
@@ -1,4 +1,4 @@
-#% if grafana.enabled | default(false) %#
+#% if grafana|default({}) and grafana.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if grafana.enabled | default(false) %#
+#% if grafana|default({}) and grafana.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: Secret
@@ -1,4 +1,4 @@
-#% if grafana.enabled | default(false) %#
+#% if grafana|default({}) and grafana.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if kube_prometheus_stack.enabled | default(false) %#
+#% if kube_prometheus_stack|default({}) and kube_prometheus_stack.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -121,7 +121,7 @@ spec:
      ingress:
        enabled: true
        ingressClassName: internal
-        #% if homepage.enabled | default(false) %#
+        #% if homepage|default({}) and homepage.enabled|default(false) %#
        annotations:
          gethomepage.dev/enabled: "true"
          gethomepage.dev/icon: prometheus.png
@@ -1,4 +1,4 @@
-#% if kube_prometheus_stack.enabled | default(false) %#
+#% if kube_prometheus_stack|default({}) and kube_prometheus_stack.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if kube_prometheus_stack.enabled | default(false) %#
+#% if kube_prometheus_stack|default({}) and kube_prometheus_stack.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if kubernetes_dashboard.enabled | default(false) %#
+#% if kubernetes_dashboard|default({}) and kubernetes_dashboard.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -31,7 +31,7 @@ spec:
    ingress:
      enabled: true
      className: internal
-      #% if homepage.enabled | default(false) %#
+      #% if homepage|default({}) and homepage.enabled|default(false) %#
      annotations:
        gethomepage.dev/enabled: "true"
        gethomepage.dev/icon: kubernetes-dashboard.png
@@ -1,4 +1,4 @@
-#% if kubernetes_dashboard.enabled | default(false) %#
+#% if kubernetes_dashboard|default({}) and kubernetes_dashboard.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if kubernetes_dashboard.enabled | default(false) %#
+#% if kubernetes_dashboard|default({}) and kubernetes_dashboard.enabled|default(false) %#
 # For dashboard sign in token:
 # kubectl -n observability get secret kubernetes-dashboard -o jsonpath='{.data.token}' | base64 -d
 ---
@@ -1,4 +1,4 @@
-#% if kubernetes_dashboard.enabled | default(false) %#
+#% if kubernetes_dashboard|default({}) and kubernetes_dashboard.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -3,12 +3,12 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  - ./namespace.yaml
-  #% if grafana.enabled | default(false) %#
+  #% if grafana|default({}) and grafana.enabled|default(false) %#
  - ./grafana/ks.yaml
  #% endif %#
-  #% if kube_prometheus_stack.enabled | default(false) %#
+  #% if kube_prometheus_stack|default({}) and kube_prometheus_stack.enabled|default(false) %#
  - ./kube-prometheus-stack/ks.yaml
  #% endif %#
-  #% if kubernetes_dashboard.enabled | default(false) %#
+  #% if kubernetes_dashboard|default({}) and kubernetes_dashboard.enabled|default(false) %#
  - ./kubernetes-dashboard/ks.yaml
  #% endif %#
@@ -1,4 +1,4 @@
-#% if csi_driver_nfs.enabled | default(false) %#
+#% if csi_driver_nfs|default({}) and csi_driver_nfs.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if csi_driver_nfs.enabled | default(false) %#
+#% if csi_driver_nfs|default({}) and csi_driver_nfs.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if csi_driver_nfs.enabled | default(false) %#
+#% if csi_driver_nfs|default({}) and csi_driver_nfs.enabled|default(false) %#
 #% for item in csi_driver_nfs.storage_class %#
 ---
 apiVersion: storage.k8s.io/v1
@@ -1,4 +1,4 @@
-#% if csi_driver_nfs.enabled | default(false) %#
+#% if csi_driver_nfs|default({}) and csi_driver_nfs.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -4,9 +4,9 @@ kind: Kustomization
 resources:
  - ./namespace.yaml
  - ./openebs/ks.yaml
-  #% if volsync.enabled | default(false) %#
+  #% if volsync|default({}) and volsync.enabled|default(false) %#
  - ./volsync/ks.yaml
  #% endif %#
-  #% if csi_driver_nfs.enabled | default(false) %#
+  #% if csi_driver_nfs|default({}) and csi_driver_nfs.enabled|default(false) %#
  - ./csi-driver-nfs/ks.yaml
  #% endif %#
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: monitoring.coreos.com/v1
 kind: PrometheusRule
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -10,7 +10,7 @@ spec:
  commonMetadata:
    labels:
      app.kubernetes.io/name: *app
-  #% if longhorn.enabled | default(false) %#
+  #% if longhorn|default({}) and longhorn.enabled|default(false) %#
  dependsOn:
    - name: longhorn
  #% endif %#
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -27,7 +27,7 @@ spec:
    keepHistory: false
  values:
    controller:
-      #% if longhorn.enabled | default(false) %#
+      #% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
      volumeSnapshotClasses:
        - name: longhorn-snapclass
          annotations:
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -5,6 +5,6 @@ resources:
  - ./namespace.yaml
  - ./descheduler/ks.yaml
  - ./reloader/ks.yaml
-  #% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+  #% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
  - ./system-upgrade-controller/ks.yaml
  #% endif %#
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: upgrade.cattle.io/v1
 kind: Plan
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: upgrade.cattle.io/v1
 kind: Plan
@@ -37,7 +37,7 @@ spec:
          before:
            - sudo bash /home/#{ item.username }#/k0s/hooks/apply-system.sh
            - sudo mv /home/#{ item.username }#/k0s/containerd/unprivileged-ports.toml /etc/k0s/containerd.d/unprivileged-ports.toml
-            #% if spegel.enabled | default(false) %#
+            #% if spegel|default({}) and spegel.enabled|default(false) %#
            - sudo mv /home/#{ item.username }#/k0s/containerd/spegel.toml /etc/k0s/containerd.d/spegel.toml
            #% endif %#
        reset:
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == 'k0s' and spegel.enabled | default(false) %#
+#% if bootstrap_distribution == 'k0s' and spegel|default({}) and spegel.enabled|default(false) %#
 [plugins."io.containerd.grpc.v1.cri".registry]
  config_path = "/var/lib/k0s/containerd/certs.d"
 [plugins."io.containerd.grpc.v1.cri".containerd]
@@ -16,6 +16,7 @@ apt-get install -y --no-install-recommends \
    nvme-cli open-iscsi parted psmisc python3 python3-apt python3-kubernetes python3-yaml \
    smartmontools socat software-properties-common unzip util-linux
 #% if bootstrap_advanced_flags|default({}) and bootstrap_advanced_flags.update_resolv_conf|default(true) %#
 # Update DNS
 chattr -i /etc/resolv.conf
 rm -f /etc/resolv.conf
@@ -24,6 +25,7 @@ search .
 nameserver #{ bootstrap_dns_server|default('1.1.1.1', true) }#
 EOF
 chattr +i /etc/resolv.conf
 #% endif %#
 # Kernel Modules
 for module in br_netfilter ceph ip_vs ip_vs_rr nbd overlay rbd; do
@@ -77,7 +77,7 @@ controlPlane:
              [plugins."io.containerd.grpc.v1.cri"]
                enable_unprivileged_ports = true
                enable_unprivileged_icmp = true
-              #% if spegel.enabled | default(false) %#
+              #% if spegel|default({}) and spegel.enabled|default(false) %#
              [plugins."io.containerd.grpc.v1.cri".containerd]
                discard_unpacked_layers = false
              [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
@@ -44,7 +44,7 @@ hubble:
    ingress:
      enabled: true
      className: internal
-      #% if homepage.enabled | default(false) %#
+      #% if homepage|default({}) and homepage.enabled|default(false) %#
      annotations:
        gethomepage.dev/enabled: "true"
        gethomepage.dev/group: Network
@@ -64,6 +64,7 @@ spegel:
 longhorn:
  # IMPORTANT: Only enable this if you have 3 or more nodes in your cluster
  # and you have enough IOPS on disk to support the number of replicas.
  # Longhorn is currently unsupported in Talos
  # Note: Consider enabling volsync if you would like to configure snapshots
  # and backups to durable storage.
  enabled: false
@@ -95,3 +95,10 @@ bootstrap_nodes:
    #   username:   # ssh username of the worker node
    #   diskSerial: # (Required: Talos) Serial number of Disk for this worker node
    # ...
 #
 # Do not make changes below this line unless you know what you are doing
 #
 # bootstrap_advanced_flags:
 #   update_resolv_conf: true # Disable to prevent changes to nodes /etc/resolv.conf