sync current state

ansible/playbooks/roles/kubernetes-prerequisites/defaults/main.yml

@@ -0,0 +1,47 @@
+---
+# Kubernetes Prerequisites Role Defaults
+
+# Kubernetes version to install (should be overridden in group_vars)
+kubernetes_version: "v1.33"
+
+# Container runtime (containerd is default)
+container_runtime: "containerd"
+
+# CNI plugin to install
+cni_plugin: "calico"
+
+# Firewall configuration
+configure_firewall: true
+
+# Time synchronization
+configure_ntp: true
+
+# SELinux configuration
+selinux_state: "permissive"
+
+# Swap configuration
+disable_swap: true
+
+# Kernel modules to load
+required_kernel_modules:
+  - overlay
+  - br_netfilter
+
+# Sysctl parameters for Kubernetes
+k8s_sysctl_params:
+  net.bridge.bridge-nf-call-iptables: 1
+  net.bridge.bridge-nf-call-ip6tables: 1
+  net.ipv4.ip_forward: 1
+
+# Kubernetes firewall ports
+k8s_firewall_ports:
+  - { protocol: "tcp", port: "6443" }    # API server
+  - { protocol: "tcp", port: "2379" }    # etcd client
+  - { protocol: "tcp", port: "2380" }    # etcd peer
+  - { protocol: "tcp", port: "10250" }   # kubelet
+  - { protocol: "tcp", port: "10251" }   # kube-scheduler
+  - { protocol: "tcp", port: "10252" }   # kube-controller-manager
+  - { protocol: "tcp", port: "10255" }   # kubelet read-only
+  - { protocol: "tcp", port: "30000-32767" }  # NodePort services
+  - { protocol: "udp", port: "4789" }    # VXLAN (Flannel)
+  - { protocol: "tcp", port: "179" }     # BGP (Calico)