Changes: - Add tailscale_control_plane_ips list to k3s-server defaults - Include all 3 control plane Tailscale IPs (100.120.55.97, 100.108.90.123, 100.92.149.85) - Update primary k3s install to add Tailscale IPs to TLS certificates - Enables kubectl access via Tailscale without certificate errors After next deploy, cluster will be accessible via: - kubectl --server=https://100.120.55.97:6443 (or any CP tailscale IP) - kubectl --server=https://k8s-cluster-cp-1:6443 (via tailscale DNS)
16 lines
446 B
YAML
16 lines
446 B
YAML
---
|
|
k3s_version: latest
|
|
k3s_token: ""
|
|
k3s_node_ip: ""
|
|
k3s_primary_public_ip: ""
|
|
k3s_disable_embedded_ccm: true
|
|
k3s_disable_servicelb: true
|
|
k3s_kubelet_cloud_provider_external: true
|
|
# Load Balancer endpoint for HA cluster joins (set in inventory)
|
|
kube_api_endpoint: ""
|
|
# Tailscale IPs for control planes (to enable tailnet access)
|
|
tailscale_control_plane_ips:
|
|
- "100.120.55.97" # cp-1
|
|
- "100.108.90.123" # cp-2
|
|
- "100.92.149.85" # cp-3
|