name: production-central-gcp
rancher_kubernetes_engine_config:
  authentication:
    strategy: x509
  cloud_provider:
    name: gce
    customCloudProvider: |-
      [global]
      project-id = m-cord
      network-project-id = onf-vpn
      network-name = default
      subnetwork-name = default
      regional = true
      multizone = true
  ignore_docker_version: true
  ingress:
    provider: nginx
  kubernetes_version: v1.15.6-rancher1-2
  monitoring:
    provider: none
  network:
    options:
      calico_cloud_provider: gce
    plugin: calico
  services:
    etcd:
      backup_config:
        enabled: true
        interval_hours: 12
        retention: 6
        safe_timestamp: false
      creation: 12h
      extra_args:
        election-timeout: 5000
        heartbeat-interval: 500
      gid: 0
      retention: 72h
      snapshot: false
      uid: 0
    kube_api:
      always_pull_images: false
      pod_security_policy: false
      service_node_port_range: 2000-36767
      service_cluster_ip_range: 10.52.128.0/17
      extra_args:
        feature-gates: "SCTPSupport=True"
    kubelet:
      cluster_domain: product.central
      cluster_dns_server: 10.52.128.10
      fail_swap_on: false
      extra_args:
        feature-gates: "SCTPSupport=True"
    kube-controller:
      cluster_cidr: 10.52.0.0/17
      service_cluster_ip_range: 10.52.128.0/17
      extra_args:
        feature-gates: "SCTPSupport=True"
    scheduler:
      extra_args:
        feature-gates: "SCTPSupport=True"
    kubeproxy:
      extra_args:
        feature-gates: "SCTPSupport=True"
  ssh_agent_auth: false
  addon_job_timeout: 30
  addons: |-
    ---
    apiVersion: storage.k8s.io/v1
    kind: StorageClass
    metadata:
      name: zonal-ssd
    provisioner: kubernetes.io/gce-pd
    parameters:
      type: pd-ssd
    ---
    apiVersion: v1
    kind: ConfigMap
    metadata:
      namespace: kube-system
      name: coredns
    data:
      Corefile: |
        .:53 {
            errors
            health
            kubernetes product.central in-addr.arpa ip6.arpa {
              pods insecure
              upstream
              fallthrough in-addr.arpa ip6.arpa
              ttl 30
            }
            prometheus :9153
            forward . "/etc/resolv.conf"
            cache 30
            loop
            reload
            loadbalance
        }

windows_prefered_cluster: false
docker_root_dir: /var/lib/docker
local_cluster_auth_endpoint:
  enabled: true
enable_network_policy: false
enable_cluster_alerting: false
enable_cluster_monitoring: false