---
# Kubernetes Prerequisites Role Defaults

# Kubernetes version to install (should be overridden in group_vars)
kubernetes_version: "v1.33"

# Container runtime (containerd is default)
container_runtime: "containerd"

# CNI plugin to install
cni_plugin: "calico"

# Firewall configuration
configure_firewall: true

# Time synchronization
configure_ntp: true

# SELinux configuration
selinux_state: "permissive"

# Swap configuration
disable_swap: true

# Kernel modules to load
required_kernel_modules:
  - overlay
  - br_netfilter

# Sysctl parameters for Kubernetes
k8s_sysctl_params:
  net.bridge.bridge-nf-call-iptables: 1
  net.bridge.bridge-nf-call-ip6tables: 1
  net.ipv4.ip_forward: 1

# Kubernetes firewall ports
k8s_firewall_ports:
  - { protocol: "tcp", port: "6443" }    # API server
  - { protocol: "tcp", port: "2379" }    # etcd client
  - { protocol: "tcp", port: "2380" }    # etcd peer
  - { protocol: "tcp", port: "10250" }   # kubelet
  - { protocol: "tcp", port: "10251" }   # kube-scheduler
  - { protocol: "tcp", port: "10252" }   # kube-controller-manager
  - { protocol: "tcp", port: "10255" }   # kubelet read-only
  - { protocol: "tcp", port: "30000-32767" }  # NodePort services
  - { protocol: "udp", port: "4789" }    # VXLAN (Flannel)
  - { protocol: "tcp", port: "179" }     # BGP (Calico)