apiVersion: k0sctl.k0sproject.io/v1beta1
kind: Cluster
metadata:
  name: k0s-cluster
spec:
  k0s:
    version: [K0S-VERSION]
    versionChannel: stable
    dynamicConfig: false
    config:
      apiVersion: k0s.k0sproject.io/v1beta1
      kind: ClusterConfig
      metadata:
        name: k0s
      spec:
        api:
          address: [K0S-HA-API-IP]
          k0sApiPort: 9443
          port: 6443
          sans:
          - [K0S-HA-API-IP]
        controllerManager: {}
        scheduler: {}
        extensions:
          helm:
            concurrencyLevel: 
            repositories:
            - name: metallb  
              url: https://metallb.github.io/metallb 
            charts:
            - name: metallb 
              chartname: metallb/metallb 
              namespace: metallb
              version: [METALLB-VERSION]
          storage:
            create_default_storage_class: false
            type: external_storage
        installConfig:
          users:
            etcdUser: etcd
            kineUser: kube-apiserver
            konnectivityUser: konnectivity-server
            kubeAPIserverUser: kube-apiserver
            kubeSchedulerUser: kube-scheduler
        konnectivity:
          adminPort: 8133
          agentPort: 8132
        network:
          clusterDomain: cluster.local
          primaryAddressFamily: IPv4
          podCIDR: 10.244.0.0/16
          serviceCIDR: 10.96.0.0/12
          provider: calico
          dualStack:
            enabled: true
            IPv6podCIDR: "fd00::/108"
            IPv6serviceCIDR: "fd01::/108"
          calico:
            mode: bird
            overlay: Always
            vxlanPort: 4789
            vxlanVNI: 4090
            mtu: 0
            wireguard: false
            ipAutodetectionMethod: "cidr=[NODES-IP-PREFIX]/[NODES-IP-NETMASK]"
            envVars:
              #CALICO_DISABLE_FILE_LOGGING: "true"
              #FELIX_HEALTHENABLED: "true"
              #FELIX_FEATUREDETECTOVERRIDE: "ChecksumOffloadBroken=true"
              CALICO_IPV4POOL_NAT_OUTGOING: "true"
              #IP_AUTODETECTION_METHOD: "interface=enp6s18"
              #CALICO_IPV4POOL_CIDR: "10.240.0.0/16"
              #FELIX_IPV6SUPPORT: "true"
              CALICO_IPV6POOL_NAT_OUTGOING: "true"
              #IP6_AUTODETECTION_METHOD: "interface=enp6s18"
              #CALICO_IPV6POOL_CIDR: "fd00::/108"
          kubeProxy:
            disabled: false
            metricsBindAddress: 0.0.0.0:10249
            mode: iptables
            ipvs:
              strictARP: true
          controlPlaneLoadBalancing:
            enabled: true
            type: Keepalived
            keepalived:
              vrrpInstances:
              - virtualIPs: ["[K0S-HA-API-IP]/[NODES-IP-NETMASK]"]
                authPass: [K0S-HA-API-AUTH-PASS]
          nodeLocalLoadBalancing:
            enabled: true
            type: EnvoyProxy
        storage:
          type: etcd
          etcd:
            externalCluster: null
            peerAddress: [K0S-HA-API-IP]
        telemetry:
          enabled: true
  hosts:
[K0S-HOSTS]