---
flatcar_expected_distribution: Flatcar

k3d_cluster_name: security-baseline
k3d_config_source: "{{ playbook_dir }}/../local-quickstart/k3d-cluster-config.yaml"
k3d_workspace: /opt/k3d-test/workspace/kubernetes-security-baseline
k3d_tool_dir: /opt/k3d-test/bin
k3d_user: core
k3d_group: core

k3d_version: 5.9.0
kubectl_version: v1.35.5
helm_version: v3.19.0
tool_architecture: amd64

bootstrap_repo_url: ""
bootstrap_repo_ref: main
bootstrap_repo_ssh_private_key: ""
bootstrap_repo_ssh_private_key_path: /run/k3d-test-repo-key
bootstrap_repo_source: "{{ playbook_dir }}/.."

kubeconfig_fetch_enabled: true
kubeconfig_artifact_dir: "{{ playbook_dir }}/../artifacts"
kubeconfig_import_enabled: true
kubeconfig_default_path: "{{ lookup('env', 'HOME') }}/.kube/config"
kubeconfig_context_name: "k3d-{{ k3d_cluster_name }}"
kubeconfig_server_host: "{{ ansible_host }}"

# Optional upstream DNS servers for nested k3d hosts. Docker may expose an
# unreachable bridge resolver to CoreDNS, so provide the host's real resolvers
# when pods must resolve external Git or webhook endpoints.
k3d_dns_servers: []