# Setup up k8s cluster

currently only supports single controller, stacked etcd cluster with three to six worker nodes.

run:

* adapt IPs in inventory.yaml

* add host keys to your ssh config `./trust-hosts.sh`

* change wg encryption keys in host\_vars: `./generate-keys.sh`
    * requires wireguard-tools, yq

* run play for the first time `ansible-playbook -i inventory.yaml -u root -t initial setup.yaml` - this will upgrade all packages and reboot the system

* run play again, without the tag

now you have an empty cluster with canal networking plugin