classes:
- system.linux.system.repo.mcp.apt_mirantis.docker_legacy
- system.kubernetes.pool.cluster
- system.linux.network.hosts
- system.salt.minion.cert.k8s_client
- system.salt.minion.cert.etcd_client
- cluster.sl-k8s-calico
parameters:
  docker:
    host:
      pkgs:
        - ${_param:kubernetes_docker_package}
        - python-docker
      options:
        bip: 172.31.255.1/24
        storage-driver: overlay2
  kubernetes:
    pool:
      kubelet:
        fail_on_swap: ${_param:kubelet_fail_on_swap}
      network:
        calico:
          enabled: true
          image: ${_param:kubernetes_calico_image}
          calicoctl_image: ${_param:kubernetes_calico_calicoctl_image}
          cni_image: ${_param:kubernetes_calico_cni_image}
          mtu: ${_param:kubernetes_mtu}
          etcd:
            ssl:
              enabled: true
    common:
      addons:
        virtlet:
          enabled: ${_param:kubernetes_virtlet_enabled}
          namespace: kube-system
          image: ${_param:kubernetes_virtlet_image}
          criproxy_version: ${_param:kubernetes_criproxy_version}
          criproxy_source: ${_param:kubernetes_criproxy_checksum}
          hosts:
          - ${_param:kubernetes_compute_node01_hostname}
          - ${_param:kubernetes_compute_node02_hostname}
      hyperkube:
        image: ${_param:kubernetes_hyperkube_image}
        pause_image: ${_param:kubernetes_pause_image}
  linux:
    network:
      resolv:
        dns:
          - 172.18.208.44
          - 172.18.176.4
          - 10.254.0.10
      interface:
        ens3:
          enabled: true
          type: eth
          proto: static
          name: ${_param:primary_interface}
          address: ${_param:deploy_address}
          netmask: 255.255.255.0
          gateway: 192.168.10.1
          route:
            kubernetes_services:
              address: 10.254.0.0
              netmask: 255.255.0.0
              gateway: ${_param:deploy_address}
        ens4:
          enabled: true
          type: eth
          proto: static
          address: ${_param:single_address}
          netmask: '255.255.255.0'