feat(networking): install and configure wireguard encryption

by default set to false. !2 #3
2023-10-29 16:53:00 +09:30
parent 57d268ec3c
commit 60fd25df8e
3 changed files with 38 additions and 0 deletions
--- a/defaults/main.yml
+++ b/defaults/main.yml
@ -117,6 +117,7 @@ k3s:
 #       name: k3s-prod                  # Mandatory, String. Ansible inventory_host that will
 #                                       # act as the prime master node.
 #     networking:
+#       encrypt: true                   # Optional, Boolean. default `false`. Install wireguard for inter-node encryption
 #       podSubnet: 172.16.70.0/24       # Mandatory, String. CIDR
 #       ServiceSubnet: 172.16.72.0/24   # Mandatory, String. CIDR
 #                                       # Mandatory, String. Token to join nodes to the cluster