series: focal
applications:
  calico:
    charm: calico
    options:
      vxlan: Always
  containerd:
    charm: containerd
  easyrsa:
    charm: easyrsa
    num_units: 1
  etcd:
    charm: etcd
    num_units: 3
    options:
      channel: 3.4/stable
  hacluster-kubeapi-load-balancer:
    channel: 2.0.3/stable
    charm: hacluster
    options:
      cluster_count: 3
  hacluster-vault:
    channel: 2.0.3/stable
    charm: hacluster
    options:
      cluster_count: 3
  kubeapi-load-balancer:
    charm: kubeapi-load-balancer
    expose: true
    num_units: 3
  kubernetes-control-plane:
    charm: kubernetes-control-plane
    constraints: arch=amd64 cpu-cores=2 mem=4096 root-disk=16384 
    num_units: 2
    options:
      allow-privileged: 'true'
  kubernetes-worker:
    charm: kubernetes-worker
    expose: true
    num_units: 3
    constraints: arch=amd64 cpu-cores=2 mem=4096 root-disk=16384 
  mysql-innodb-cluster:
    channel: 8.0/stable
    charm: mysql-innodb-cluster
    num_units: 3
    options:
      enable-binlogs: true
      innodb-buffer-pool-size: 256M
      max-connections: 2000
      wait-timeout: 3600
  vault:
    channel: 1.7/stable
    charm: vault
    revision: 103
    num_units: 3
  vault-mysql-router:
    channel: 8.0/stable
    charm: mysql-router
relations:
- ['calico:cni', 'kubernetes-control-plane:cni']
- ['calico:cni', 'kubernetes-worker:cni']
- ['calico:etcd', 'etcd:db']
- ['containerd:containerd', 'kubernetes-control-plane:container-runtime']
- ['containerd:containerd', 'kubernetes-worker:container-runtime']
- ['easyrsa:client', 'etcd:certificates']
- ['etcd:db', 'kubernetes-control-plane:etcd']
- ['etcd:db', 'vault:etcd']
- ['hacluster-kubeapi-load-balancer:ha', 'kubeapi-load-balancer:ha']
- ['hacluster-vault:ha', 'vault:ha']
- ['kubeapi-load-balancer:apiserver', 'kubernetes-control-plane:kube-api-endpoint']
- ['kubeapi-load-balancer:certificates', 'vault:certificates']
- ['kubeapi-load-balancer:loadbalancer', 'kubernetes-control-plane:loadbalancer']
- ['kubeapi-load-balancer:website', 'kubernetes-worker:kube-api-endpoint']
- ['kubernetes-control-plane:certificates', 'vault:certificates']
- ['kubernetes-control-plane:kube-control', 'kubernetes-worker:kube-control']
- ['kubernetes-worker:certificates', 'vault:certificates']
- ['mysql-innodb-cluster:db-router', 'vault-mysql-router:db-router']
- ['vault-mysql-router:shared-db', 'vault:shared-db']