debug: false
machine:
  type: ${machine_type}
  install:
    disk: /dev/vda
    image: factory.talos.dev/nocloud-installer-secureboot/ce4c980550dd2ab1b17bbf2b08801c7eb59418eafe8f279833297925d67c7515:v${talos_version}
  network:
    hostname: ${hostname}
    nameservers:
      - 9.9.9.9
  kubelet:
    extraArgs:
      pod-max-pids: 1000
      rotate-server-certificates: true
    extraConfig:
      imageGCHighThresholdPercent: 75
      imageGCLowThresholdPercent: 70
  nodeLabels:
    topology.kubernetes.io/region: ${cluster_name}
    topology.kubernetes.io/zone: ${node_name}

cluster:
  apiServer:
    auditPolicy:
      apiVersion: audit.k8s.io/v1
      kind: Policy
      rules:
        - level: Metadata
  network:
    cni:
      name: none
  proxy:
    disabled: true
  extraManifests:
  - https://github.com/kubernetes-sigs/gateway-api/releases/download/v${gateway-api_version}/standard-install.yaml
  - https://raw.githubusercontent.com/alex1989hu/kubelet-serving-cert-approver/main/deploy/standalone-install.yaml
  inlineManifests:
  - name: cilium-bootstrap
    contents: |
      ${indent(6, cilium_install_file)}