apiVersion: kubeadm.k8s.io/v1beta3
kind: ClusterConfiguration
kubernetesVersion: ${k8s_version}
imageRepository: "${google_image_registry}"
controlPlaneEndpoint: "${k8s_api_domain}:${k8s_api_port}"
#clusterName: ${clucster_name}
etcd:
  local:
    dataDir: "${etcd_data_dir}"
    extraArgs:
      quota-backend-bytes: "8589934592"
      auto-compaction-retention: "24h"
      auto-compaction-mode: "periodic"
      cipher-suites: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
apiServer:
  extraArgs:
    service-node-port-range: "${node_port_range}"
    tls-cipher-suites: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
controllerManager:
  extraArgs:
    tls-cipher-suites: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
controllerManager:
  extraArgs:
    tls-cipher-suites: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
networking:
  serviceSubnet: "${svc_cidr}"
  podSubnet: "${pod_cidr}"
  dnsDomain: "${cluster_dns_domain}"

---
 
apiVersion: kubeadm.k8s.io/v1beta3
kind: InitConfiguration
bootstrapTokens:
- token: "${cluster_cert_token}"
  description: "default kubeadm bootstrap token"
  ttl: "24h"
nodeRegistration:
  criSocket: /run/containerd/containerd.sock
 
---

apiVersion: kubelet.config.k8s.io/v1beta1
kind: KubeletConfiguration
cgroupDriver: systemd
failSwapOn: false

---

apiVersion: kubeproxy.config.k8s.io/v1alpha1
kind: KubeProxyConfiguration
mode: ${cluster_proxy_mode}
ipvs:
  excludeCIDRs:
  - ${k8s_api_vip}/32
