# Pinned versions: docs/versions.md is the source of truth, keep in sync.
k3s_version: v1.35.8+k3s1
cert_manager_chart_version: v1.21.2
capi_operator_chart_version: 0.28.0
capi_version: v1.12.11
capmox_version: v0.9.1
ipam_in_cluster_version: v1.1.1

ubuntu_image_url: https://cloud-images.ubuntu.com/noble/20260926/noble-server-cloudimg-amd64.img
ubuntu_image_sha256: 6a81c37564db9b1ee84e141922625e1d7c5b389b99bb3c572e0243607d5bb4d2
ubuntu_image_path: /var/lib/vz/template/iso/noble-server-cloudimg-amd64-20260926.img

# Proxmox (token secret lives in secrets.yml)
proxmox_url: https://192.168.0.8:8006
proxmox_token_id: capmox@pve!capi
proxmox_storage: local-lvm
proxmox_bridge: vmbr0
proxmox_vlan: 4

# Management VM (VLAN 4). Fill in the empty values before the first run.
mgmt_vmid: "201"
mgmt_name: lab-mgmt
mgmt_ip: "192.168.4.21"
mgmt_prefix: 24
mgmt_gateway: "192.168.4.8"
mgmt_dns: ["8.8.8.8", "2.2.2.2"]
mgmt_cores: 2
mgmt_memory_mib: 4096
mgmt_disk_size: 30G
mgmt_ssh_public_key: "{{ lookup('file', lookup('env', 'HOME') + '/.ssh/id_ed25519.pub') }}"

# Workload clusters that get a cluster-inspector read-only kubeconfig (--tags inspector).
# Skipped while the cluster's <name>-kubeconfig Secret doesn't exist.
inspector_workload_clusters:
  - { name: lab1, namespace: default }

# Installed by the cluster-api-operator; CR namespace = install namespace (clusterctl defaults).
capi_providers:
  - { kind: CoreProvider, name: cluster-api, namespace: capi-system, version: "{{ capi_version }}" }
  - { kind: BootstrapProvider, name: kubeadm, namespace: capi-kubeadm-bootstrap-system, version: "{{ capi_version }}" }
  - { kind: ControlPlaneProvider, name: kubeadm, namespace: capi-kubeadm-control-plane-system, version: "{{ capi_version }}" }
  - { kind: InfrastructureProvider, name: proxmox, namespace: capmox-system, version: "{{ capmox_version }}", config_secret: capmox-variables }
  - { kind: IPAMProvider, name: in-cluster, namespace: capi-ipam-in-cluster-system, version: "{{ ipam_in_cluster_version }}" }