feat: add advanced features to config (#1208)

* feat: add advanced features to config Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: only enable longhorn if distro is k3s or k0s Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update ansible lint Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-20 12:27:20 -05:00
1 parent 0fda1f6a56
commit 1ec59d1559
@@ -1,6 +1,6 @@
 ---
 - name: Query Cloudflare zone
-  when: not ci_test | default(false)
+  when: not ci_test|default(false)
  ansible.builtin.uri:
    url: https://api.cloudflare.com/client/v4/zones?name={{ bootstrap_cloudflare_domain }}&status=active
    headers:
@@ -12,14 +12,14 @@
  register: result

 - name: Check if Cloudflare zone exists
-  when: not ci_test | default(false)
+  when: not ci_test|default(false)
  ansible.builtin.assert:
    that: result.json.success is true
    success_msg: Cloudflare zone {{ bootstrap_cloudflare_domain }} exists
    fail_msg: Cloudflare zone {{ bootstrap_cloudflare_domain }} does not exist

 - name: Query Cloudflared tunnel
-  when: not ci_test | default(false)
+  when: not ci_test|default(false)
  ansible.builtin.uri:
    url: https://api.cloudflare.com/client/v4/accounts/{{ bootstrap_cloudflare_account_tag }}/cfd_tunnel/{{ bootstrap_cloudflare_tunnel_id }}
    headers:
@@ -31,7 +31,7 @@
  register: result

 - name: Check if Cloudflared tunnel exists
-  when: not ci_test | default(false)
+  when: not ci_test|default(false)
  ansible.builtin.assert:
    that: result.json.success is true
    success_msg: Cloudflared tunnel {{ bootstrap_cloudflare_tunnel_id }} exists
@@ -1,6 +1,6 @@
 ---
 - name: Query Github username
-  when: not ci_test | default(false)
+  when: not ci_test|default(false)
  ansible.builtin.uri:
    url: https://api.github.com/users/{{ bootstrap_github_username }}
    timeout: 5
@@ -9,14 +9,14 @@
  register: result

 - name: Check if username exists
-  when: not ci_test | default(false)
+  when: not ci_test|default(false)
  ansible.builtin.assert:
    that: result.json.login == bootstrap_github_username
    success_msg: Github user {{ bootstrap_github_username }} exists
    fail_msg: Github user {{ bootstrap_github_username }} does not exist

 - name: Query Github repo
-  when: (not ci_test | default(false)) and (not bootstrap_private_github_repo | default(false))
+  when: (not ci_test|default(false)) and (not bootstrap_private_github_repo|default(false))
  ansible.builtin.uri:
    url: https://api.github.com/repos/{{ bootstrap_github_username }}/{{ bootstrap_github_repository_name }}
    timeout: 5
@@ -25,24 +25,24 @@
  register: result

 - name: Check if repo exists
-  when: (not ci_test | default(false)) and (not bootstrap_private_github_repo | default(false))
+  when: (not ci_test|default(false)) and (not bootstrap_private_github_repo|default(false))
  ansible.builtin.assert:
    that: result.json.full_name == bootstrap_github_username + '/' + bootstrap_github_repository_name
    success_msg: Github repo {{ bootstrap_github_username }}/{{ bootstrap_github_repository_name }} exists
    fail_msg: Github repo {{ bootstrap_github_username }}/{{ bootstrap_github_repository_name }} does not exist

 - name: Query Github repo branch
-  when: (not ci_test | default(false)) and (not bootstrap_private_github_repo | default(false))
+  when: (not ci_test|default(false)) and (not bootstrap_private_github_repo|default(false))
  ansible.builtin.uri:
-    url: https://api.github.com/repos/{{ bootstrap_github_username }}/{{ bootstrap_github_repository_name }}/branches/{{ bootstrap_github_repository_branch | default('main', true) }}
+    url: https://api.github.com/repos/{{ bootstrap_github_username }}/{{ bootstrap_github_repository_name }}/branches/{{ bootstrap_github_repository_branch|default('main', true) }}
    timeout: 5
    return_content: true
    body_format: json
  register: result

 - name: Check if repo branch exists
-  when: (not ci_test | default(false)) and (not bootstrap_private_github_repo | default(false))
+  when: (not ci_test|default(false)) and (not bootstrap_private_github_repo|default(false))
  ansible.builtin.assert:
-    that: result.json.name == bootstrap_github_repository_branch | default('main', true)
-    success_msg: Github repo branch {{ bootstrap_github_repository_branch | default('main', true) }} exists
-    fail_msg: Github repo branch {{ bootstrap_github_repository_branch | default('main', true) }} does not exist
+    that: result.json.name == bootstrap_github_repository_branch|default('main', true)
+    success_msg: Github repo branch {{ bootstrap_github_repository_branch|default('main', true) }} exists
+    fail_msg: Github repo branch {{ bootstrap_github_repository_branch|default('main', true) }} does not exist
@@ -14,21 +14,21 @@
    fail_msg: Node CIDR {{ bootstrap_node_cidr }} is invalid.

 - name: Check if cluster CIDR is ipv4 OR ipv6
-  when: not bootstrap_ipv6_enabled | default(false)
+  when: not bootstrap_ipv6_enabled|default(false)
  ansible.builtin.assert:
    that: bootstrap_cluster_cidr is ansible.utils.ipv4 or bootstrap_cluster_cidr is ansible.utils.ipv6
    success_msg: Cluster CIDR {{ bootstrap_cluster_cidr }} is valid.
    fail_msg: Cluster CIDR {{ bootstrap_cluster_cidr }} is invalid.

 - name: Check if service CIDR is ipv4 OR ipv6
-  when: not bootstrap_ipv6_enabled | default(false)
+  when: not bootstrap_ipv6_enabled|default(false)
  ansible.builtin.assert:
    that: bootstrap_service_cidr is ansible.utils.ipv4 or bootstrap_service_cidr is ansible.utils.ipv6
    success_msg: Service CIDR {{ bootstrap_service_cidr }} is valid.
    fail_msg: Service CIDR {{ bootstrap_service_cidr }} is invalid.

 - name: Check if cluster CIDR is ipv4 AND ipv6
-  when: bootstrap_ipv6_enabled | default(false)
+  when: bootstrap_ipv6_enabled|default(false)
  ansible.builtin.assert:
    that: >
      (
@@ -42,7 +42,7 @@
    fail_msg: Cluster CIDR {{ bootstrap_cluster_cidr }} is invalid.

 - name: Check if service CIDR is ipv4 AND ipv6
-  when: bootstrap_ipv6_enabled | default(false)
+  when: bootstrap_ipv6_enabled|default(false)
  ansible.builtin.assert:
    that: >
      (
@@ -122,24 +122,24 @@
    fail_msg: All IP addresses are not unique.

 - name: Check if nodes are not the same IPs as k8s_gateway or ingress external/internal
-  when: not bootstrap_kube_vip_enabled | default(true)
+  when: not bootstrap_kube_vip_enabled|default(true)
  ansible.builtin.assert:
    that: item.address not in (bootstrap_k8s_gateway_addr, bootstrap_external_ingress_addr, bootstrap_internal_ingress_addr)
    success_msg: Node address {{ item.address }} is different than k8s_gateway or ingress-nginx.
    fail_msg: Node address {{ item.address }} is not different than k8s_gateway or ingress-nginx.
    quiet: true
-  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker | default([]) }}"
+  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker|default([]) }}"
  loop_control:
    label: "{{ item.address }}"

 - name: Check if nodes are not the same IPs as k8s_gateway, ingress external/internal or Kube API address
-  when: (bootstrap_distribution == "k3s") and (bootstrap_kube_vip_enabled | default(true))
+  when: (bootstrap_distribution == "k3s") and (bootstrap_kube_vip_enabled|default(true))
  ansible.builtin.assert:
    that: item.address not in (bootstrap_k8s_gateway_addr, bootstrap_external_ingress_addr, bootstrap_internal_ingress_addr, bootstrap_kube_api_addr)
    success_msg: Node address {{ item.address }} is different than k8s_gateway, ingress-nginx or Kube API.
    fail_msg: Node address {{ item.address }} is not different than k8s_gateway, ingress-nginx or Kube API.
    quiet: true
-  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker | default([]) }}"
+  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker|default([]) }}"
  loop_control:
    label: "{{ item.address }}"

@@ -149,7 +149,7 @@
    success_msg: Node address {{ item.address }} is valid.
    fail_msg: Node address {{ item.address }} is invalid.
    quiet: true
-  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker | default([]) }}"
+  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker|default([]) }}"
  loop_control:
    label: "{{ item.address }}"

@@ -159,7 +159,7 @@
    success_msg: Node address {{ item.address }} is within {{ bootstrap_node_cidr }}.
    fail_msg: Node address {{ item.address }} is not within {{ bootstrap_node_cidr }}.
    quiet: true
-  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker | default([]) }}"
+  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker|default([]) }}"
  loop_control:
    label: "{{ item.address }}"

@@ -167,11 +167,11 @@
  ansible.builtin.assert:
    that: >
      (
-        (bootstrap_nodes.master + bootstrap_nodes.worker | default([])) | map(attribute='address') | list
+        (bootstrap_nodes.master + bootstrap_nodes.worker|default([])) | map(attribute='address') | list
      ) | unique | length
      ==
      (
-        (bootstrap_nodes.master + bootstrap_nodes.worker | default([])) | map(attribute='address') | list
+        (bootstrap_nodes.master + bootstrap_nodes.worker|default([])) | map(attribute='address') | list
      ) | length
    success_msg: All node IP addresses are unique.
    fail_msg: All node IP addresses are not unique.
@@ -181,34 +181,34 @@
  ansible.builtin.assert:
    that: >
      (
-        (bootstrap_nodes.master + bootstrap_nodes.worker | default([])) | map(attribute='name') | list
+        (bootstrap_nodes.master + bootstrap_nodes.worker|default([])) | map(attribute='name') | list
      ) | unique | length
      ==
      (
-        (bootstrap_nodes.master + bootstrap_nodes.worker | default([])) | map(attribute='name') | list
+        (bootstrap_nodes.master + bootstrap_nodes.worker|default([])) | map(attribute='name') | list
      ) | length
    success_msg: All node names are unique.
    fail_msg: All node names are not unique.
    quiet: true

 - name: Check if SSH ports are reachable
-  when: (not ci_test | default(false)) and (not bootstrap_distribution == "talos")
+  when: (not ci_test|default(false)) and (not bootstrap_distribution == "talos")
  ansible.builtin.wait_for:
    host: "{{ item.address }}"
    port: 22
    timeout: 10
  connection: local
-  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker | default([]) }}"
+  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker|default([]) }}"
  loop_control:
    label: "{{ item.address }}"

 - name: Check if Talos ports are reachable
-  when: (not ci_test | default(false)) and (bootstrap_distribution == "talos")
+  when: (not ci_test|default(false)) and (bootstrap_distribution == "talos")
  ansible.builtin.wait_for:
    host: "{{ item.address }}"
    port: 50000
    timeout: 10
  connection: local
-  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker | default([]) }}"
+  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker|default([]) }}"
  loop_control:
    label: "{{ item.address }}"
@@ -43,6 +43,6 @@
    that: item.name is match('^[a-z0-9-\.]+$')
    success_msg: Node name {{ item.name }} is valid
    fail_msg: Node name {{ item.name }} is not valid
-  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker | default([]) }}"
+  loop: "{{ bootstrap_nodes.master + bootstrap_nodes.worker|default([]) }}"
  loop_control:
    label: "{{ item.name }}"
@@ -1,5 +1,6 @@
-#% if bootstrap_distribution == 'k3s' or bootstrap_distribution == 'k0s' %#
+#% if bootstrap_distribution in ['k3s', 'k0s'] %#
 skip_list:
+  - jinja[spacing]
  - yaml[commas]
  - yaml[line-length]
  - var-naming
@@ -11,7 +11,7 @@ k3s_registration_address: "{{ kube_api_addr }}"
 # /var/lib/rancher/k3s/server/manifests
 k3s_server_manifests_templates:
  - custom-cilium-helmchart.yaml.j2
-#% if bootstrap_nodes.master | length > 1 or bootstrap_kube_api_addr | default('') %#
+#% if bootstrap_nodes.master | length > 1 or bootstrap_kube_api_addr|default('') %#
 # /var/lib/rancher/k3s/server/manifests
 k3s_server_manifests_urls:
  - url: https://raw.githubusercontent.com/kube-vip/website/main/content/manifests/rbac.yaml
@@ -1,20 +1,20 @@
-#% if bootstrap_distribution == 'k3s' or bootstrap_distribution == 'k0s' %#
+#% if bootstrap_distribution in ['k3s', 'k0s'] %#
 ---
 timezone: "#{ bootstrap_timezone }#"
 github_username: "#{ bootstrap_github_username }#"
 coredns_addr: "#{ bootstrap_service_cidr.split(',')[0] | nthhost(10) }#"
-#% if bootstrap_nodes.master | length > 1 or bootstrap_kube_api_addr | default('') %#
+#% if bootstrap_nodes.master | length > 1 or bootstrap_kube_api_addr|default('') %#
 kube_api_addr: "#{ bootstrap_kube_api_addr }#"
 #% else %#
 kube_api_addr: "#{ bootstrap_nodes.master[0].address }#"
 #% endif %#
-#% if bootstrap_kube_api_hostname | default('') %#
+#% if bootstrap_kube_api_hostname|default('') %#
 kube_api_hostname: "#{ bootstrap_kube_api_hostname }#"
 #% endif %#
 cluster_cidr: "#{ bootstrap_cluster_cidr.split(',')[0] }#"
 service_cidr: "#{ bootstrap_service_cidr.split(',')[0] }#"
 node_cidr: "#{ bootstrap_node_cidr }#"
-#% if bootstrap_ipv6_enabled | default(false) %#
+#% if bootstrap_ipv6_enabled|default(false) %#
 cluster_cidr_v6: "#{ bootstrap_cluster_cidr.split(',')[1] }#"
 service_cidr_v6: "#{ bootstrap_service_cidr.split(',')[1] }#"
 #% endif %#
@@ -4,14 +4,14 @@
 # https://github.com/PyratLabs/ansible-role-k3s
 k3s_control_node: true
 k3s_server:
-  #% if bootstrap_ipv6_enabled | default(false) %#
+  #% if bootstrap_ipv6_enabled|default(false) %#
  node-ip: "{{ ansible_host }},{{ ansible_default_ipv6.address }}"
  #% else %#
  node-ip: "{{ ansible_host }}"
  #% endif %#
  tls-san:
    - "{{ kube_api_addr }}"
-    #% if bootstrap_kube_api_hostname | default('') %#
+    #% if bootstrap_kube_api_hostname|default('') %#
    - "{{ kube_api_hostname }}"
    #% endif %#
  docker: false
@@ -23,7 +23,7 @@ k3s_server:
  write-kubeconfig-mode: "644"
  pause-image: registry.k8s.io/pause:3.9
  secrets-encryption: true
-  #% if bootstrap_ipv6_enabled | default(false) %#
+  #% if bootstrap_ipv6_enabled|default(false) %#
  cluster-cidr: "{{ cluster_cidr }},{{ cluster_cidr_v6 }}"
  service-cidr: "{{ service_cidr }},{{ service_cidr_v6 }}"
  #% else %#
@@ -4,7 +4,7 @@
 # https://github.com/PyratLabs/ansible-role-k3s
 k3s_control_node: false
 k3s_agent:
-  #% if bootstrap_ipv6_enabled | default(false) %#
+  #% if bootstrap_ipv6_enabled|default(false) %#
  node-ip: "{{ ansible_host }},{{ ansible_default_ipv6.address }}"
  #% else %#
  node-ip: "{{ ansible_host }}"
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == 'k3s' or bootstrap_distribution == 'k0s' %#
+#% if bootstrap_distribution in ['k3s', 'k0s'] %#
 ---
 kubernetes:
  children:
@@ -9,7 +9,7 @@ kubernetes:
          ansible_user: "#{ item.username }#"
          ansible_host: "#{ item.address }#"
      #% endfor %#
-    #% if bootstrap_nodes.worker | default([]) | length > 0 %#
+    #% if bootstrap_nodes.worker|default([]) | length > 0 %#
    worker:
      hosts:
      #% for item in bootstrap_nodes.worker %#
@@ -41,7 +41,7 @@
        kubeconfig: /etc/rancher/k3s/k3s.yaml
        kind: "{{ item.kind }}"
        name: "{{ item.name }}"
-        namespace: "{{ item.namespace | default('') }}"
+        namespace: "{{ item.namespace|default('') }}"
        wait: true
        wait_sleep: 10
        wait_timeout: 360
@@ -16,7 +16,7 @@
      block:
        - name: Locale | Set timezone
          community.general.timezone:
-            name: "{{ timezone | default('Etc/UTC') }}"
+            name: "{{ timezone|default('Etc/UTC') }}"

    - name: Packages
      block:
@@ -62,6 +62,7 @@
              ff02::2 ip6-allrouters
            dest: /etc/hosts
            mode: preserve
+        #% if bootstrap_advanced_flags|default({}) and bootstrap_advanced_flags.update_resolv_conf|default(true) %#
        # https://github.com/onedr0p/flux-cluster-template/discussions/635
        - name: Network Configuration | Remove immutable flag from /etc/resolv.conf
          ansible.builtin.file:
@@ -79,7 +80,8 @@
            dest: /etc/resolv.conf
            content: |
              search .
-              nameserver #{ bootstrap_dns_server | default('1.1.1.1', true) }#
+              nameserver #{ bootstrap_dns_server|default('1.1.1.1', true) }#
+        #% endif %#

    - name: System Configuration
      notify: Reboot
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == 'k3s' or bootstrap_distribution == 'k0s' %#
+#% if bootstrap_distribution in ['k3s', 'k0s'] %#
 ---
 - name: Reboot
  hosts: kubernetes
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == 'k3s' or bootstrap_distribution == 'k0s' %#
+#% if bootstrap_distribution in ['k3s', 'k0s'] %#
 ---
 # https://github.com/kevincoakley/ansible-role-k8s-rolling-update
 - name: Cluster rollout update
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == 'k3s' and (bootstrap_nodes.master | length > 1 or bootstrap_kube_api_addr | default('')) %#
+#% if bootstrap_distribution == 'k3s' and (bootstrap_nodes.master | length > 1 or bootstrap_kube_api_addr|default('')) %#
 ---
 apiVersion: v1
 kind: Pod
@@ -1,4 +1,4 @@
-#% if discord_template_notifier.enabled | default(false) %#
+#% if discord_template_notifier|default({}) and discord_template_notifier.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if discord_template_notifier.enabled | default(false) %#
+#% if discord_template_notifier|default({}) and discord_template_notifier.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if discord_template_notifier.enabled | default(false) %#
+#% if discord_template_notifier|default({}) and discord_template_notifier.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: Secret
@@ -1,4 +1,4 @@
-#% if discord_template_notifier.enabled | default(false) %#
+#% if discord_template_notifier|default({}) and discord_template_notifier.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if homepage.enabled | default(false) %#
+#% if homepage|default({}) and homepage.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: ConfigMap
@@ -1,4 +1,4 @@
-#% if homepage.enabled | default(false) %#
+#% if homepage|default({}) and homepage.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if homepage.enabled | default(false) %#
+#% if homepage|default({}) and homepage.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if homepage.enabled | default(false) %#
+#% if homepage|default({}) and homepage.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: Secret
@@ -1,4 +1,4 @@
-#% if homepage.enabled | default(false) %#
+#% if homepage|default({}) and homepage.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -3,9 +3,9 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  - ./namespace.yaml
-  #% if homepage.enabled | default(false) %#
+  #% if homepage|default({}) and homepage.enabled|default(false) %#
  - ./homepage/ks.yaml
  #% endif %#
-  #% if discord_template_notifier.enabled | default(false) %#
+  #% if discord_template_notifier|default({}) and discord_template_notifier.enabled|default(false) %#
  - ./discord-template-notifier/ks.yaml
  #% endif %#
@@ -4,6 +4,6 @@ kind: Kustomization
 resources:
  - ./namespace.yaml
  - ./addons/ks.yaml
-  #% if weave_gitops.enabled | default(false) %#
+  #% if weave_gitops|default({}) and weave_gitops.enabled|default(false) %#
  - ./weave-gitops/ks.yaml
  #% endif %#
@@ -1,4 +1,4 @@
-#% if weave_gitops.enabled | default(false) %#
+#% if weave_gitops|default({}) and weave_gitops.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -31,7 +31,7 @@ spec:
    ingress:
      enabled: true
      className: internal
-      #% if homepage.enabled | default(false) %#
+      #% if homepage|default({}) and homepage.enabled|default(false) %#
      annotations:
        gethomepage.dev/enabled: "true"
        gethomepage.dev/group: Home
@@ -1,4 +1,4 @@
-#% if weave_gitops.enabled | default(false) %#
+#% if weave_gitops|default({}) and weave_gitops.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if weave_gitops.enabled | default(false) %#
+#% if weave_gitops|default({}) and weave_gitops.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: Secret
@@ -1,4 +1,4 @@
-#% if weave_gitops.enabled | default(false) %#
+#% if weave_gitops|default({}) and weave_gitops.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -2,7 +2,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  #% if not bootstrap_ipv6_enabled | default(false) %#
+  #% if not bootstrap_ipv6_enabled|default(false) %#
  - ./cilium-l2.yaml
  #% endif %#
  - ./helmrelease.yaml
@@ -8,6 +8,6 @@ resources:
  - ./kubelet-csr-approver/ks.yaml
  #% endif %#
  - ./metrics-server/ks.yaml
-  #% if (bootstrap_distribution == "k0s" or bootstrap_distribution == "talos") and spegel.enabled | default(false) %#
+  #% if bootstrap_distribution in ['k0s', 'talos'] and spegel|default({}) and spegel.enabled|default(false) %#
  - ./spegel/ks.yaml
  #% endif %#
@@ -1,4 +1,4 @@
-#% if (bootstrap_distribution == "k0s" or bootstrap_distribution == "talos") and spegel.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'talos'] and spegel|default({}) and spegel.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if (bootstrap_distribution == "k0s" or bootstrap_distribution == "talos") and spegel.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'talos'] and spegel|default({}) and spegel.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if (bootstrap_distribution == "k0s" or bootstrap_distribution == "talos") and spegel.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'talos'] and spegel|default({}) and spegel.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: storage.k8s.io/v1
 kind: StorageClass
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if longhorn.enabled | default(false) %#
+#% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: Namespace
@@ -70,7 +70,7 @@ spec:
        className: external
        annotations:
          external-dns.alpha.kubernetes.io/target: "external.${SECRET_DOMAIN}"
-          #% if homepage.enabled | default(false) %#
+          #% if homepage|default({}) and homepage.enabled|default(false) %#
          gethomepage.dev/enabled: "true"
          gethomepage.dev/group: Network
          gethomepage.dev/name: Echo Server
@@ -3,6 +3,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  - ./staging.yaml
-  #% if bootstrap_acme_production_enabled | default(false) %#
+  #% if bootstrap_acme_production_enabled|default(false) %#
  - ./production.yaml
  #% endif %#
@@ -70,7 +70,7 @@ spec:
          namespaceSelector:
            any: true
      extraArgs:
-        #% if bootstrap_acme_production_enabled | default(false) %#
+        #% if bootstrap_acme_production_enabled|default(false) %#
        default-ssl-certificate: "network/${SECRET_DOMAIN/./-}-production-tls"
        #% else %#
        default-ssl-certificate: "network/${SECRET_DOMAIN/./-}-staging-tls"
@@ -68,7 +68,7 @@ spec:
          namespaceSelector:
            any: true
      extraArgs:
-        #% if bootstrap_acme_production_enabled | default(false) %#
+        #% if bootstrap_acme_production_enabled|default(false) %#
        default-ssl-certificate: "network/${SECRET_DOMAIN/./-}-production-tls"
        #% else %#
        default-ssl-certificate: "network/${SECRET_DOMAIN/./-}-staging-tls"
@@ -1,4 +1,4 @@
-#% if grafana.enabled | default(false) %#
+#% if grafana|default({}) and grafana.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -159,7 +159,7 @@ spec:
    ingress:
      enabled: true
      ingressClassName: internal
-      #% if homepage.enabled | default(false) %#
+      #% if homepage|default({}) and homepage.enabled|default(false) %#
      annotations:
        gethomepage.dev/enabled: "true"
        gethomepage.dev/icon: grafana.png
@@ -1,4 +1,4 @@
-#% if grafana.enabled | default(false) %#
+#% if grafana|default({}) and grafana.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if grafana.enabled | default(false) %#
+#% if grafana|default({}) and grafana.enabled|default(false) %#
 ---
 apiVersion: v1
 kind: Secret
@@ -1,4 +1,4 @@
-#% if grafana.enabled | default(false) %#
+#% if grafana|default({}) and grafana.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if kube_prometheus_stack.enabled | default(false) %#
+#% if kube_prometheus_stack|default({}) and kube_prometheus_stack.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -121,7 +121,7 @@ spec:
      ingress:
        enabled: true
        ingressClassName: internal
-        #% if homepage.enabled | default(false) %#
+        #% if homepage|default({}) and homepage.enabled|default(false) %#
        annotations:
          gethomepage.dev/enabled: "true"
          gethomepage.dev/icon: prometheus.png
@@ -1,4 +1,4 @@
-#% if kube_prometheus_stack.enabled | default(false) %#
+#% if kube_prometheus_stack|default({}) and kube_prometheus_stack.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if kube_prometheus_stack.enabled | default(false) %#
+#% if kube_prometheus_stack|default({}) and kube_prometheus_stack.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if kubernetes_dashboard.enabled | default(false) %#
+#% if kubernetes_dashboard|default({}) and kubernetes_dashboard.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -31,7 +31,7 @@ spec:
    ingress:
      enabled: true
      className: internal
-      #% if homepage.enabled | default(false) %#
+      #% if homepage|default({}) and homepage.enabled|default(false) %#
      annotations:
        gethomepage.dev/enabled: "true"
        gethomepage.dev/icon: kubernetes-dashboard.png
@@ -1,4 +1,4 @@
-#% if kubernetes_dashboard.enabled | default(false) %#
+#% if kubernetes_dashboard|default({}) and kubernetes_dashboard.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if kubernetes_dashboard.enabled | default(false) %#
+#% if kubernetes_dashboard|default({}) and kubernetes_dashboard.enabled|default(false) %#
 # For dashboard sign in token:
 # kubectl -n observability get secret kubernetes-dashboard -o jsonpath='{.data.token}' | base64 -d
 ---
@@ -1,4 +1,4 @@
-#% if kubernetes_dashboard.enabled | default(false) %#
+#% if kubernetes_dashboard|default({}) and kubernetes_dashboard.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -3,12 +3,12 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  - ./namespace.yaml
-  #% if grafana.enabled | default(false) %#
+  #% if grafana|default({}) and grafana.enabled|default(false) %#
  - ./grafana/ks.yaml
  #% endif %#
-  #% if kube_prometheus_stack.enabled | default(false) %#
+  #% if kube_prometheus_stack|default({}) and kube_prometheus_stack.enabled|default(false) %#
  - ./kube-prometheus-stack/ks.yaml
  #% endif %#
-  #% if kubernetes_dashboard.enabled | default(false) %#
+  #% if kubernetes_dashboard|default({}) and kubernetes_dashboard.enabled|default(false) %#
  - ./kubernetes-dashboard/ks.yaml
  #% endif %#
@@ -1,4 +1,4 @@
-#% if csi_driver_nfs.enabled | default(false) %#
+#% if csi_driver_nfs|default({}) and csi_driver_nfs.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if csi_driver_nfs.enabled | default(false) %#
+#% if csi_driver_nfs|default({}) and csi_driver_nfs.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if csi_driver_nfs.enabled | default(false) %#
+#% if csi_driver_nfs|default({}) and csi_driver_nfs.enabled|default(false) %#
 #% for item in csi_driver_nfs.storage_class %#
 ---
 apiVersion: storage.k8s.io/v1
@@ -1,4 +1,4 @@
-#% if csi_driver_nfs.enabled | default(false) %#
+#% if csi_driver_nfs|default({}) and csi_driver_nfs.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -4,9 +4,9 @@ kind: Kustomization
 resources:
  - ./namespace.yaml
  - ./openebs/ks.yaml
-  #% if volsync.enabled | default(false) %#
+  #% if volsync|default({}) and volsync.enabled|default(false) %#
  - ./volsync/ks.yaml
  #% endif %#
-  #% if csi_driver_nfs.enabled | default(false) %#
+  #% if csi_driver_nfs|default({}) and csi_driver_nfs.enabled|default(false) %#
  - ./csi-driver-nfs/ks.yaml
  #% endif %#
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: monitoring.coreos.com/v1
 kind: PrometheusRule
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -10,7 +10,7 @@ spec:
  commonMetadata:
    labels:
      app.kubernetes.io/name: *app
-  #% if longhorn.enabled | default(false) %#
+  #% if longhorn|default({}) and longhorn.enabled|default(false) %#
  dependsOn:
    - name: longhorn
  #% endif %#
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -27,7 +27,7 @@ spec:
    keepHistory: false
  values:
    controller:
-      #% if longhorn.enabled | default(false) %#
+      #% if bootstrap_distribution in ['k0s', 'k3s'] and longhorn|default({}) and longhorn.enabled|default(false) %#
      volumeSnapshotClasses:
        - name: longhorn-snapclass
          annotations:
@@ -1,4 +1,4 @@
-#% if volsync.enabled | default(false) %#
+#% if volsync|default({}) and volsync.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -5,6 +5,6 @@ resources:
  - ./namespace.yaml
  - ./descheduler/ks.yaml
  - ./reloader/ks.yaml
-  #% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+  #% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
  - ./system-upgrade-controller/ks.yaml
  #% endif %#
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: upgrade.cattle.io/v1
 kind: Plan
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == "k3s" and system_upgrade_controller.enabled | default(false) %#
+#% if bootstrap_distribution == "k3s" and system_upgrade_controller|default({}) and system_upgrade_controller.enabled|default(false) %#
 ---
 apiVersion: upgrade.cattle.io/v1
 kind: Plan
@@ -7,8 +7,8 @@ metadata:
 spec:
  interval: 30m
  ref:
-    branch: "#{ bootstrap_github_repository_branch | default('main', true) }#"
-  #% if bootstrap_private_github_repo | default(false) %#
+    branch: "#{ bootstrap_github_repository_branch|default('main', true) }#"
+  #% if bootstrap_private_github_repo|default(false) %#
  secretRef:
    name: github-deploy-key
  url: "ssh://github.com/#{ bootstrap_github_username }#/#{ bootstrap_github_repository_name }#"
@@ -7,7 +7,7 @@ metadata:
 data:
  TIMEZONE: "#{ bootstrap_timezone }#"
  COREDNS_ADDR: "#{ bootstrap_service_cidr.split(',')[0] | nthhost(10) }#"
-  #% if bootstrap_nodes.master | length > 1 or bootstrap_kube_api_addr | default('') %#
+  #% if bootstrap_nodes.master | length > 1 or bootstrap_kube_api_addr|default('') %#
  KUBE_API_ADDR: "#{ bootstrap_kube_api_addr }#"
  #% else %#
  KUBE_API_ADDR: "#{ bootstrap_nodes.master[0].address }#"
@@ -15,7 +15,7 @@ data:
  CLUSTER_CIDR: "#{ bootstrap_cluster_cidr.split(',')[0] }#"
  SERVICE_CIDR: "#{ bootstrap_service_cidr.split(',')[0] }#"
  NODE_CIDR: "#{ bootstrap_node_cidr }#"
-  #% if bootstrap_ipv6_enabled | default(false) %#
+  #% if bootstrap_ipv6_enabled|default(false) %#
  CLUSTER_CIDR_V6: "#{ bootstrap_cluster_cidr.split(',')[1] }#"
  SERVICE_CIDR_V6: "#{ bootstrap_service_cidr.split(',')[1] }#"
  #% endif %#
@@ -37,7 +37,7 @@ spec:
          before:
            - sudo bash /home/#{ item.username }#/k0s/hooks/apply-system.sh
            - sudo mv /home/#{ item.username }#/k0s/containerd/unprivileged-ports.toml /etc/k0s/containerd.d/unprivileged-ports.toml
-            #% if spegel.enabled | default(false) %#
+            #% if spegel|default({}) and spegel.enabled|default(false) %#
            - sudo mv /home/#{ item.username }#/k0s/containerd/spegel.toml /etc/k0s/containerd.d/spegel.toml
            #% endif %#
        reset:
@@ -49,7 +49,7 @@ spec:
      hooks: *hooks
      #% endif %#
    #% endfor %#
-    #% if bootstrap_nodes.worker | default([]) | length > 0 %#
+    #% if bootstrap_nodes.worker|default([]) | length > 0 %#
    #% for item in bootstrap_nodes.worker %#
    - role: worker
      ssh:
@@ -82,14 +82,14 @@ spec:
        api:
          sans:
            - "#{ bootstrap_kube_api_addr }#"
-            #% if bootstrap_kube_api_hostname | default('') %#
+            #% if bootstrap_kube_api_hostname|default('') %#
            - "#{ bootstrap_kube_api_hostname }#"
            #% endif %#
            #% for item in bootstrap_nodes.master %#
            #% if item.address != bootstrap_kube_api_addr %#
            - "#{ item.address }#"
            #% endif %#
-            #% if (not bootstrap_kube_api_hostname | default('')) or (item.name != bootstrap_kube_api_hostname | default('')) %#
+            #% if (not bootstrap_kube_api_hostname|default('')) or (item.name != bootstrap_kube_api_hostname|default('')) %#
            - "#{ item.name }#"
            #% endif %#
            #% endfor %#
@@ -1,4 +1,4 @@
-#% if bootstrap_distribution == 'k0s' and spegel.enabled | default(false) %#
+#% if bootstrap_distribution == 'k0s' and spegel|default({}) and spegel.enabled|default(false) %#
 [plugins."io.containerd.grpc.v1.cri".registry]
  config_path = "/var/lib/k0s/containerd/certs.d"
 [plugins."io.containerd.grpc.v1.cri".containerd]
@@ -16,14 +16,16 @@ apt-get install -y --no-install-recommends \
    nvme-cli open-iscsi parted psmisc python3 python3-apt python3-kubernetes python3-yaml \
    smartmontools socat software-properties-common unzip util-linux

+#% if bootstrap_advanced_flags|default({}) and bootstrap_advanced_flags.update_resolv_conf|default(true) %#
 # Update DNS
 chattr -i /etc/resolv.conf
 rm -f /etc/resolv.conf
 cat <<EOF > /etc/resolv.conf
 search .
-nameserver #{ bootstrap_dns_server | default('1.1.1.1', true) }#
+nameserver #{ bootstrap_dns_server|default('1.1.1.1', true) }#
 EOF
 chattr +i /etc/resolv.conf
+#% endif %#

 # Kernel Modules
 for module in br_netfilter ceph ip_vs ip_vs_rr nbd overlay rbd; do
@@ -8,7 +8,7 @@ kubernetesVersion: 1.29.1

 clusterName: &cluster home-kubernetes

-#% if bootstrap_kube_api_hostname | default('') %#
+#% if bootstrap_kube_api_hostname|default('') %#
 endpoint: https://#{ bootstrap_kube_api_hostname }#:6443
 #% else %#
 endpoint: https://#{ bootstrap_kube_api_addr }#:6443
@@ -22,7 +22,7 @@ clusterSvcNets:
 additionalApiServerCertSans: &sans
  - "#{ bootstrap_kube_api_addr }#"
  - 127.0.0.1 #KubePrism
-  #% if bootstrap_kube_api_hostname | default('') %#
+  #% if bootstrap_kube_api_hostname|default('') %#
  - "#{ bootstrap_kube_api_hostname }#"
  #% endif %#

@@ -48,7 +48,7 @@ nodes:
        vip:
          ip: "#{ bootstrap_kube_api_addr }#"
  #% endfor %#
-  #% if bootstrap_nodes.worker | default([]) | length > 0 %#
+  #% if bootstrap_nodes.worker|default([]) | length > 0 %#
  #% for item in bootstrap_nodes.worker %#
  - hostname: "#{ item.name }#"
    ipAddress: "#{ item.address }#"
@@ -77,7 +77,7 @@ controlPlane:
              [plugins."io.containerd.grpc.v1.cri"]
                enable_unprivileged_ports = true
                enable_unprivileged_icmp = true
-              #% if spegel.enabled | default(false) %#
+              #% if spegel|default({}) and spegel.enabled|default(false) %#
              [plugins."io.containerd.grpc.v1.cri".containerd]
                discard_unpacked_layers = false
              [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
@@ -123,7 +123,7 @@ controlPlane:
      machine:
        network:
          nameservers:
-            - "#{ bootstrap_dns_server | default('1.1.1.1', true) }#"
+            - "#{ bootstrap_dns_server|default('1.1.1.1', true) }#"

    # Configure NTP
    - &ntpPatch |-
@@ -44,7 +44,7 @@ hubble:
    ingress:
      enabled: true
      className: internal
-      #% if homepage.enabled | default(false) %#
+      #% if homepage|default({}) and homepage.enabled|default(false) %#
      annotations:
        gethomepage.dev/enabled: "true"
        gethomepage.dev/group: Network
@@ -59,7 +59,7 @@ hubble:
 ipam:
  mode: kubernetes
 ipv4NativeRoutingCIDR: "${CLUSTER_CIDR}"
-#% if bootstrap_ipv6_enabled | default(false) %#
+#% if bootstrap_ipv6_enabled|default(false) %#
 ipv6NativeRoutingCIDR: "${CLUSTER_CIDR_V6}"
 ipv6:
  enabled: true
@@ -77,7 +77,7 @@ k8sServicePort: 7445
 kubeProxyReplacement: true
 kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
 l2announcements:
-  #% if bootstrap_ipv6_enabled | default(false) %#
+  #% if bootstrap_ipv6_enabled|default(false) %#
  enabled: false
  #% else %#
  enabled: true
@@ -88,7 +88,7 @@ l2announcements:
  #% endif %#
 loadBalancer:
  algorithm: maglev
-  mode: "#{ bootstrap_cilium_loadbalancer_mode | default('dsr', true) }#"
+  mode: "#{ bootstrap_cilium_loadbalancer_mode|default('dsr', true) }#"
 localRedirectPolicy: true
 operator:
  replicas: 1
@@ -20,7 +20,7 @@ hubble:
 ipam:
  mode: kubernetes
 ipv4NativeRoutingCIDR: "#{ bootstrap_cluster_cidr }#"
-#% if bootstrap_ipv6_enabled | default(false) %#
+#% if bootstrap_ipv6_enabled|default(false) %#
 ipv6NativeRoutingCIDR: "#{ bootstrap_cluster_cidr_v6 }#"
 ipv6:
  enabled: true
@@ -38,7 +38,7 @@ k8sServicePort: 7445
 kubeProxyReplacement: true
 kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
 l2announcements:
-  #% if bootstrap_ipv6_enabled | default(false) %#
+  #% if bootstrap_ipv6_enabled|default(false) %#
  enabled: false
  #% else %#
  enabled: true
@@ -49,7 +49,7 @@ l2announcements:
  #% endif %#
 loadBalancer:
  algorithm: maglev
-  mode: "#{ bootstrap_cilium_loadbalancer_mode | default('dsr', true) }#"
+  mode: "#{ bootstrap_cilium_loadbalancer_mode|default('dsr', true) }#"
 localRedirectPolicy: true
 operator:
  replicas: 1
@@ -1,2 +1,2 @@
-providerRegex: ^(#{ (bootstrap_nodes.master + bootstrap_nodes.worker | default([])) | map(attribute='name') | join('|') }#)$
+providerRegex: ^(#{ (bootstrap_nodes.master + bootstrap_nodes.worker|default([])) | map(attribute='name') | join('|') }#)$
 bypassDnsResolution: true
@@ -64,6 +64,7 @@ spegel:
 longhorn:
  # IMPORTANT: Only enable this if you have 3 or more nodes in your cluster
  # and you have enough IOPS on disk to support the number of replicas.
+  # Longhorn is currently unsupported in Talos
  # Note: Consider enabling volsync if you would like to configure snapshots
  # and backups to durable storage.
  enabled: false
@@ -95,3 +95,10 @@ bootstrap_nodes:
    #   username:   # ssh username of the worker node
    #   diskSerial: # (Required: Talos) Serial number of Disk for this worker node
    # ...
+
+#
+# Do not make changes below this line unless you know what you are doing
+#
+
+# bootstrap_advanced_flags:
+#   update_resolv_conf: true # Disable to prevent changes to nodes /etc/resolv.conf