1 {% if k8.feature.loadbalancer %}
2 - [ 'kubernetes-master:kube-api-endpoint', 'kubeapi-load-balancer:apiserver' ]
4 - [ 'kubernetes-master:kube-api-endpoint', 'kubernetes-worker:kube-api-endpoint' ]
6 - [ 'kubernetes-master:certificates', 'easyrsa:client' ]
7 - [ 'kubernetes-master:etcd', 'etcd:db' ]
8 - [ 'kubernetes-master:kube-control', 'kubernetes-worker:kube-control' ]
9 - [ 'kubernetes-worker:certificates', 'easyrsa:client' ]
10 {% if k8.network.controller == 'ovn' %}
11 - [ 'ovn:cni', 'kubernetes-master:cni' ]
12 - [ 'ovn:cni', 'kubernetes-worker:cni' ]
13 {% elif k8.network.controller == 'canal' %}
14 - [ 'canal:etcd', 'etcd:db' ]
15 - [ 'canal:cni', 'kubernetes-master:cni' ]
16 - [ 'canal:cni', 'kubernetes-worker:cni' ]
18 - [ 'flannel:etcd', 'etcd:db' ]
19 - [ 'flannel:cni', 'kubernetes-master:cni' ]
20 - [ 'flannel:cni', 'kubernetes-worker:cni' ]
22 - [ 'etcd:certificates', 'easyrsa:client' ]
23 {% if k8.feature.loadbalancer %}
24 - [ 'kubernetes-master:loadbalancer', 'kubeapi-load-balancer:loadbalancer' ]
25 - [ 'kubernetes-worker:kube-api-endpoint', 'kubeapi-load-balancer:website' ]
26 - [ 'kubeapi-load-balancer:certificates', 'easyrsa:client' ]
28 {% if k8.feature.storage == 'ceph' %}
29 - [ 'ceph-osd:mon', 'ceph-mon:osd' ]
30 - [ 'ceph-mon:admin', 'kubernetes-master:ceph-storage' ]