---
k8s_manager_timezone: "Europe/Moscow"

# Fix #8: opt-in full upgrade — set true only when intentionally patching the OS
k8s_manager_upgrade_packages: false

kubectl_version: ""
helm_version: ""
k9s_version: ""

k8s_manager_extra_packages:
  - bash-completion
  - curl
  - wget
  - git
  - vim
  - htop
  - net-tools
  - bind-utils
  - jq
  - python3
  - python3-pip

# kubeconfig location on the manager node
kubeconfig_dir: "/home/{{ ansible_user }}/.kube"

# Kubernetes Dashboard (manifest from GitHub raw — no CDN issues)
dashboard_enabled: true
dashboard_namespace: "kubernetes-dashboard"
dashboard_manifest_url: "https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml"
# Traefik terminates TLS — dashboard serves plain HTTP on port 9090
dashboard_insecure: false