--- # Variables shared across all cluster nodes (control_plane + workers) # Pod and service CIDRs — must match kubeadm config in control_plane role. # Defined here so both control_plane and worker firewall rules can reference them. pod_network_cidr: "10.244.0.0/16" service_cidr: "10.96.0.0/12"