---
# Shared connection + cluster facts for every k3s node.

# cloud-init created this login user (tofu var login_user); it has NOPASSWD sudo.
ansible_user: k3s

# The kube-apiserver endpoint the whole stack agrees on: the primary node IP.
# Used for k3s --tls-san / secondary --server AND for Cilium k8sServiceHost so the
# Ansible bootstrap and the Flux HelmRelease stay in PARITY (docs/02 contract).
k3s_api_host: "{{ hostvars[groups['k3s_primary'][0]]['ansible_host'] }}"
k3s_api_port: 6443