controlPlane:
  distro:
    k3s:
      enabled: true
      image:
        tag: v1.33.5-k3s1
  statefulSet:
    scheduling:
      podManagementPolicy: OrderedReady
experimental:
  deploy:
    vcluster:
      manifestsTemplate: |-
        ---
        apiVersion: helm.cattle.io/v1
        kind: HelmChart
        metadata:
          name: cert-manager
        spec:
          chart: cert-manager
          createNamespace: true
          version: v1.13.0
          repo: https://charts.jetstack.io
          targetNamespace: cert-manager
          valuesContent: |
            installCRDs: true
        ---
        apiVersion: helm.cattle.io/v1
        kind: HelmChart
        metadata:
          name: bootstrap-cluster
        spec:
          chart: cluster-api-operator
          repo: https://kubernetes-sigs.github.io/cluster-api-operator
          version: v0.14.0
          valuesContent: |
            cert-manager:
              enabled: true
            bootstrap: rke2
            controlPlane: rke2
        ---
        apiVersion: v1
        kind: Namespace
        metadata:
          name: caphv-system
        ---
        apiVersion: operator.cluster.x-k8s.io/v1alpha2
        kind: InfrastructureProvider
        metadata:
          name: harvester
          namespace: caphv-system
        spec:
          version: v0.1.4
          fetchConfig:
            url: https://github.com/rancher-sandbox/cluster-api-provider-harvester/releases/download/v0.1.4/components.yaml
        ---
        apiVersion: cluster.x-k8s.io/v1beta1
        kind: Cluster
        metadata:
          labels:
            ccm: external
            cluster.x-k8s.io/cluster-name: rke2-mgmt
            cni: external
            csi: external
          name: rke2-mgmt
          namespace: default
        spec:
          controlPlaneRef:
            apiVersion: controlplane.cluster.x-k8s.io/v1alpha1
            kind: RKE2ControlPlane
            name: rke2-mgmt-control-plane
          infrastructureRef:
            apiVersion: infrastructure.cluster.x-k8s.io/v1alpha1
            kind: HarvesterCluster
            name: rke2-mgmt-hv
        ---
        apiVersion: infrastructure.cluster.x-k8s.io/v1alpha1
        kind: HarvesterCluster
        metadata:
          name: rke2-mgmt-hv
          namespace: default
        spec:
          identitySecret:
            name: hv-identity-secret
            namespace: default
          loadBalancerConfig:
            ipamType: dhcp
            listeners:
            - backendPort: 9345
              name: rke2-server
              port: 9345
              protocol: TCP
            - backendPort: 443
              name: rke2-ingress
              port: 443
              protocol: TCP
          server: {{ .Values.harvester_vip }}
          targetNamespace: default
        ---
        apiVersion: v1
        data:
          kubeconfig: {{ .Values.harvester_kubeconfig_b64 }}
        kind: Secret
        metadata:
          name: hv-identity-secret
          namespace: default
        ---
        apiVersion: controlplane.cluster.x-k8s.io/v1alpha1
        kind: RKE2ControlPlane
        metadata:
          name: rke2-mgmt-control-plane
          namespace: default
        spec:
          agentConfig:
            version: v1.33.5+rke2r1
          infrastructureRef:
            apiVersion: infrastructure.cluster.x-k8s.io/v1alpha1
            kind: HarvesterMachineTemplate
            name: rke2-mgmt-cp-machine
            namespace: default
          replicas: 3
          serverConfig:
            cni: canal
        ---
        apiVersion: bootstrap.cluster.x-k8s.io/v1alpha1
        kind: RKE2ConfigTemplate
        metadata:
          name: rke2-mgmt-worker
          namespace: default
        spec:
          template:
            spec:
              agentConfig:
                version: v1.33.5+rke2r1
        ---
        apiVersion: cluster.x-k8s.io/v1beta1
        kind: MachineDeployment
        metadata:
          name: rke2-mgmt-workers
          namespace: default
        spec:
          clusterName: rke2-mgmt
          replicas: 0
          selector:
            matchLabels:
              cluster.x-k8s.io/cluster-name: rke2-mgmt
          template:
            spec:
              bootstrap:
                configRef:
                  apiVersion: bootstrap.cluster.x-k8s.io/v1alpha1
                  kind: RKE2ConfigTemplate
                  name: rke2-mgmt-worker
                  namespace: default
              clusterName: rke2-mgmt
              infrastructureRef:
                apiVersion: infrastructure.cluster.x-k8s.io/v1alpha1
                kind: HarvesterMachineTemplate
                name: rke2-mgmt-wk-machine
                namespace: default
              version: v1.29.6+rke2r1
        ---
        apiVersion: infrastructure.cluster.x-k8s.io/v1alpha1
        kind: HarvesterMachineTemplate
        metadata:
          name: rke2-mgmt-wk-machine
          namespace: default
        spec:
          template:
            spec:
              cpu: 2
              memory: 16Gi
              networks:
              - {{ .Values.vm_network_name }}
              sshKeyPair: default/{{ .Values.ssh_keypair }}
              sshUser: {{ .Values.vm_default_user }}
              volumes:
              - bootOrder: 0
                imageName: default/{{ .Values.vm_image_name }}
                volumeSize: 40Gi
                volumeType: image
        ---
        apiVersion: infrastructure.cluster.x-k8s.io/v1alpha1
        kind: HarvesterMachineTemplate
        metadata:
          name: rke2-mgmt-cp-machine
          namespace: default
        spec:
          template:
            spec:
              cpu: 2
              memory: 16Gi
              networks:
              - {{ .Values.vm_network_name }}
              sshKeyPair: default/{{ .Values.ssh_keypair }}
              sshUser: {{ .Values.vm_default_user }}
              volumes:
              - bootOrder: 0
                imageName: default/{{ .Values.vm_image_name }}
                volumeSize: 40Gi
                volumeType: image
        ---
        apiVersion: addons.cluster.x-k8s.io/v1beta1
        kind: ClusterResourceSet
        metadata:
          labels:
            cluster.x-k8s.io/cluster-name: rke2-mgmt
          name: rke2-mgmt-rancher-crs-0
          namespace: default
        spec:
          clusterSelector:
            matchLabels:
              cluster.x-k8s.io/cluster-name: rke2-mgmt
          resources:
          - kind: Secret
            name: rancher-namespace
          - kind: Secret
            name: rancher-helmchart
          - kind: Secret
            name: certmanager-helmchart
          strategy: Reconcile
        ---
        apiVersion: v1
        kind: Secret
        metadata:
          name: certmanager-helmchart
          namespace: default
        stringData:
          data: "apiVersion: helm.cattle.io/v1\nkind: HelmChart\nmetadata:\n  name: cert-manager\n
            \ namespace: default      \nspec:\n  bootstrap: true\n  targetNamespace: cert-manager\n
            \ createNamespace: true\n  valuesContent: |-\n    securityContext:\n      runAsNonRoot:
            true\n    crds:\n      enabled: true\n  version: v1.16.1\n  repo: https://charts.jetstack.io\n
            \ chart: cert-manager\n"
        type: addons.cluster.x-k8s.io/resource-set
        ---
        apiVersion: v1
        kind: Secret
        metadata:
          name: rancher-helmchart
          namespace: default
        stringData:
          data: "apiVersion: helm.cattle.io/v1\nkind: HelmChart\nmetadata:\n  name: rancher\n
            \ namespace: default      \nspec:\n  bootstrap: false\n  targetNamespace: cattle-system\n
            \ createNamespace: true\n  set:\n    hostname: {{ .Values.rancher_url }}\n
            \   replicas: 3\n    bootstrapPassword: admin\n  valuesContent: |-\n    global:\n
            \     cattle:\n        psp:\n          enabled: false\n    ingress:\n      tls:\n
            \       source: rancher\n  repo: https://releases.rancher.com/server-charts/latest\n
            \ chart: rancher\n  version: v2.12.3\n"
        type: addons.cluster.x-k8s.io/resource-set
sync:
  fromHost:
    ingressClasses:
      enabled: true
  toHost:
    ingresses:
      enabled: true