Files
kubernetes-security-baselin…/ansible/inventory.flatcar-k3d.example.yml
swaphb 6c79340d9a
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
add environment-specific cilium profiles
2026-08-16 20:04:14 -04:00

21 lines
825 B
YAML

all:
children:
flatcar_k3d_hosts:
hosts:
flatcar-k3d-test:
ansible_host: REPLACE_WITH_FLATCAR_IP
ansible_user: core
ansible_ssh_private_key_file: ~/.ssh/REPLACE_WITH_KEY
ansible_become_method: sudo
cilium_enabled: false
cilium_profile: k3d
cilium_k8s_service_host: REPLACE_WITH_REACHABLE_API_IP
# Set to zero for k3d so Ansible derives the published API port from
# the kubeconfig created during cluster bootstrap.
cilium_k8s_service_port: 0
# Optional. Use resolvers reachable from the Flatcar network when
# Docker's nested bridge resolver cannot answer external names.
# k3d_dns_servers:
# - REPLACE_WITH_PRIMARY_DNS
# - REPLACE_WITH_SECONDARY_DNS