feat!: Refector directories and flux apps (#559)

ansible/inventory/group_vars/master/k3s.yml

@@ -0,0 +1,45 @@
+---
+# https://rancher.com/docs/k3s/latest/en/installation/install-options/server-config/
+# https://github.com/PyratLabs/ansible-role-k3s
+
+# (bool) Specify if a host (or host group) are part of the control plane
+k3s_control_node: true
+
+# (dict) k3s settings for all control-plane nodes
+k3s_server:
+  node-ip: "{{ ansible_host }}"
+  tls-san:
+    - "{{ kubevip_address }}"
+  # Disable Docker - this will use the default containerd CRI
+  docker: false
+  flannel-backend: "none" # This needs to be in quotes
+  disable:
+    # Disable flannel - replaced with Calico
+    - flannel
+    # Disable traefik - replaced with ingress-nginx
+    - traefik
+    # Disable servicelb - replaced with metallb and install with Flux
+    - servicelb
+    # Disable metrics-server - installed with Flux
+    - metrics-server
+  disable-network-policy: true
+  disable-cloud-controller: true
+  write-kubeconfig-mode: "644"
+  # Network CIDR to use for pod IPs
+  cluster-cidr: "10.42.0.0/16"
+  # Network CIDR to use for service IPs
+  service-cidr: "10.43.0.0/16"
+  kube-controller-manager-arg:
+    # Required to monitor kube-controller-manager with kube-prometheus-stack
+    - "bind-address=0.0.0.0"
+  kube-proxy-arg:
+    # Required to monitor kube-proxy with kube-prometheus-stack
+    - "metrics-bind-address=0.0.0.0"
+  kube-scheduler-arg:
+    # Required to monitor kube-scheduler with kube-prometheus-stack
+    - "bind-address=0.0.0.0"
+  # Required to monitor etcd with kube-prometheus-stack
+  etcd-expose-metrics: true
+  kube-apiserver-arg:
+    # Required for HAProxy health-checks
+    - "anonymous-auth=true"