Repository: kinvolk/lokomotive
Pull request #1229 (2020-12-02 08:28:29)

contour: parameterise envoy scraping interval
This commit adds a parameter to contour's component config, using which now users can choose what (prometheus) scrape interval they want for envoy.

# How to use

Deploy contour using following config:

```tf
component "contour" {
  enable_monitoring = true

  envoy {
    metrics_scrape_interval = "30s"
  }
}
```

And you can watch the field `interval` vary according to the value of `metrics_scrape_interval`. If the field `metrics_scrape_interval` is not provided then the `interval` field is also left out.

```bash
kubectl -n projectcontour get servicemonitor envoy -o yaml | grep interval
```

Fixes: #1194


Patch:
diff --git a/assets/charts/components/contour/templates/service-monitor.yaml b/assets/charts/components/contour/templates/service-monitor.yaml
index da4a0b36..8b2cad59 100644
--- a/assets/charts/components/contour/templates/service-monitor.yaml
+++ b/assets/charts/components/contour/templates/service-monitor.yaml
@@ -12,6 +12,9 @@ spec:
   endpoints:
   - port: envoy-metrics
     path: /stats/prometheus
+    {{- if .Values.envoy.metricsScrapeInterval }}
+    interval: {{ .Values.envoy.metricsScrapeInterval }}
+    {{- end }}
   namespaceSelector:
     matchNames:
     - projectcontour
diff --git a/assets/charts/components/contour/values.yaml b/assets/charts/components/contour/values.yaml
index 13a886a6..9273b029 100644
--- a/assets/charts/components/contour/values.yaml
+++ b/assets/charts/components/contour/values.yaml
@@ -9,6 +9,7 @@ envoy:
   image: docker.io/envoyproxy/envoy
   tag: v1.16.0
   serviceType:
+  metricsScrapeInterval:
 
 nodeAffinity: {}
 # nodeAffinity:
diff --git a/assets/charts/control-plane/kubernetes/templates/kube-proxy.yaml b/assets/charts/control-plane/kubernetes/templates/kube-proxy.yaml
index 811181f9..c00556f3 100644
--- a/assets/charts/control-plane/kubernetes/templates/kube-proxy.yaml
+++ b/assets/charts/control-plane/kubernetes/templates/kube-proxy.yaml
@@ -42,9 +42,6 @@ spec:
         - --proxy-mode=iptables
         - --metrics-bind-address=$(HOST_IP)
         - --healthz-bind-address=$(HOST_IP)
-        {{- if not (eq (int .Values.kubeProxy.conntrackMaxPerCore) 32768) }}
-        - --conntrack-max-per-core={{ .Values.kubeProxy.conntrackMaxPerCore }}
-        {{- end }}
         env:
           - name: NODE_NAME
             valueFrom:
diff --git a/assets/charts/control-plane/kubernetes/values.yaml b/assets/charts/control-plane/kubernetes/values.yaml
index 8b4f5ced..1b03016d 100644
--- a/assets/charts/control-plane/kubernetes/values.yaml
+++ b/assets/charts/control-plane/kubernetes/values.yaml
@@ -12,7 +12,6 @@ kubeProxy:
   image: k8s.gcr.io/kube-proxy:v1.19.4
   podCIDR: 10.2.0.0/16
   trustedCertsDir: /usr/share/ca-certificates
-  conntrackMaxPerCore: 32768
 kubeScheduler:
   image: k8s.gcr.io/kube-scheduler:v1.19.4
   controlPlaneReplicas: 1
diff --git a/assets/terraform-modules/aws/flatcar-linux/kubernetes/bootkube.tf b/assets/terraform-modules/aws/flatcar-linux/kubernetes/bootkube.tf
index be65162c..aaf97d0b 100644
--- a/assets/terraform-modules/aws/flatcar-linux/kubernetes/bootkube.tf
+++ b/assets/terraform-modules/aws/flatcar-linux/kubernetes/bootkube.tf
@@ -33,6 +33,4 @@ module "bootkube" {
   encrypt_pod_traffic  = var.encrypt_pod_traffic
 
   ignore_x509_cn_check = var.ignore_x509_cn_check
-
-  conntrack_max_per_core = var.conntrack_max_per_core
 }
diff --git a/assets/terraform-modules/aws/flatcar-linux/kubernetes/variables.tf b/assets/terraform-modules/aws/flatcar-linux/kubernetes/variables.tf
index 54b7e167..bf3059a6 100644
--- a/assets/terraform-modules/aws/flatcar-linux/kubernetes/variables.tf
+++ b/assets/terraform-modules/aws/flatcar-linux/kubernetes/variables.tf
@@ -196,8 +196,3 @@ variable "ignore_x509_cn_check" {
   type        = bool
   default     = false
 }
-
-variable "conntrack_max_per_core" {
-  description = "--conntrack-max-per-core value for kube-proxy. Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore the conntrack-min kube-proxy flag)."
-  type        = number
-}
diff --git a/assets/terraform-modules/bare-metal/flatcar-linux/kubernetes/bootkube.tf b/assets/terraform-modules/bare-metal/flatcar-linux/kubernetes/bootkube.tf
index b283ed08..53e8230b 100644
--- a/assets/terraform-modules/bare-metal/flatcar-linux/kubernetes/bootkube.tf
+++ b/assets/terraform-modules/bare-metal/flatcar-linux/kubernetes/bootkube.tf
@@ -26,6 +26,4 @@ module "bootkube" {
   encrypt_pod_traffic  = var.encrypt_pod_traffic
 
   ignore_x509_cn_check = var.ignore_x509_cn_check
-
-  conntrack_max_per_core = var.conntrack_max_per_core
 }
diff --git a/assets/terraform-modules/bare-metal/flatcar-linux/kubernetes/variables.tf b/assets/terraform-modules/bare-metal/flatcar-linux/kubernetes/variables.tf
index 68dfc781..aaef0937 100644
--- a/assets/terraform-modules/bare-metal/flatcar-linux/kubernetes/variables.tf
+++ b/assets/terraform-modules/bare-metal/flatcar-linux/kubernetes/variables.tf
@@ -195,8 +195,3 @@ variable "ignore_x509_cn_check" {
   type        = bool
   default     = false
 }
-
-variable "conntrack_max_per_core" {
-  description = "--conntrack-max-per-core value for kube-proxy. Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore the conntrack-min kube-proxy flag)."
-  type        = number
-}
diff --git a/assets/terraform-modules/bootkube/assets.tf b/assets/terraform-modules/bootkube/assets.tf
index 8c9e7133..5398e16e 100644
--- a/assets/terraform-modules/bootkube/assets.tf
+++ b/assets/terraform-modules/bootkube/assets.tf
@@ -31,26 +31,26 @@ resource "local_file" "bootstrap-scheduler" {
 resource "local_file" "kube-apiserver" {
   filename = "${var.asset_dir}/charts/kube-system/kube-apiserver.yaml"
   content = templatefile("${path.module}/resources/charts/kube-apiserver.yaml", {
-    kube_apiserver_image    = var.container_images["kube_apiserver"]
-    etcd_servers            = join(",", formatlist("https://%s:2379", var.etcd_servers))
-    cloud_provider          = var.cloud_provider
-    service_cidr            = var.service_cidr
-    trusted_certs_dir       = var.trusted_certs_dir
-    ca_cert                 = base64encode(tls_self_signed_cert.kube-ca.cert_pem)
-    apiserver_key           = base64encode(tls_private_key.apiserver.private_key_pem)
-    apiserver_cert          = base64encode(tls_locally_signed_cert.apiserver.cert_pem)
-    serviceaccount_pub      = base64encode(tls_private_key.service-account.public_key_pem)
-    etcd_ca_cert            = base64encode(tls_self_signed_cert.etcd-ca.cert_pem)
-    etcd_client_cert        = base64encode(tls_locally_signed_cert.client.cert_pem)
-    etcd_client_key         = base64encode(tls_private_key.client.private_key_pem)
-    enable_aggregation      = var.enable_aggregation
-    aggregation_ca_cert     = var.enable_aggregation == true ? base64encode(join(" ", tls_self_signed_cert.aggregation-ca.*.cert_pem)) : ""
-    aggregation_client_cert = var.enable_aggregation == true ? base64encode(join(" ", tls_locally_signed_cert.aggregation-client.*.cert_pem)) : ""
-    aggregation_client_key  = var.enable_aggregation == true ? base64encode(join(" ", tls_private_key.aggregation-client.*.private_key_pem)) : ""
-    replicas                = length(var.etcd_servers)
-    extra_flags             = var.kube_apiserver_extra_flags
-    enable_tls_bootstrap    = var.enable_tls_bootstrap
-    ignore_x509_cn_check    = var.ignore_x509_cn_check
+    kube_apiserver_image     = var.container_images["kube_apiserver"]
+    etcd_servers             = join(",", formatlist("https://%s:2379", var.etcd_servers))
+    cloud_provider           = var.cloud_provider
+    service_cidr             = var.service_cidr
+    trusted_certs_dir        = var.trusted_certs_dir
+    ca_cert                  = base64encode(tls_self_signed_cert.kube-ca.cert_pem)
+    apiserver_key            = base64encode(tls_private_key.apiserver.private_key_pem)
+    apiserver_cert           = base64encode(tls_locally_signed_cert.apiserver.cert_pem)
+    serviceaccount_pub       = base64encode(tls_private_key.service-account.public_key_pem)
+    etcd_ca_cert             = base64encode(tls_self_signed_cert.etcd-ca.cert_pem)
+    etcd_client_cert         = base64encode(tls_locally_signed_cert.client.cert_pem)
+    etcd_client_key          = base64encode(tls_private_key.client.private_key_pem)
+    enable_aggregation       = var.enable_aggregation
+    aggregation_ca_cert      = var.enable_aggregation == true ? base64encode(join(" ", tls_self_signed_cert.aggregation-ca.*.cert_pem)) : ""
+    aggregation_client_cert  = var.enable_aggregation == true ? base64encode(join(" ", tls_locally_signed_cert.aggregation-client.*.cert_pem)) : ""
+    aggregation_client_key   = var.enable_aggregation == true ? base64encode(join(" ", tls_private_key.aggregation-client.*.private_key_pem)) : ""
+    replicas                 = length(var.etcd_servers)
+    extra_flags              = var.kube_apiserver_extra_flags
+    enable_tls_bootstrap     = var.enable_tls_bootstrap
+    ignore_x509_cn_check     = var.ignore_x509_cn_check
   })
 }
 
@@ -82,7 +82,6 @@ resource "local_file" "kubernetes" {
     serviceaccount_key            = base64encode(tls_private_key.service-account.private_key_pem)
     etcd_endpoints                = var.etcd_endpoints
     enable_tls_bootstrap          = var.enable_tls_bootstrap
-    conntrack_max_per_core        = var.conntrack_max_per_core
   })
 }
 
diff --git a/assets/terraform-modules/bootkube/resources/charts/kubernetes.yaml b/assets/terraform-modules/bootkube/resources/charts/kubernetes.yaml
index cf30acf0..8757d7ff 100644
--- a/assets/terraform-modules/bootkube/resources/charts/kubernetes.yaml
+++ b/assets/terraform-modules/bootkube/resources/charts/kubernetes.yaml
@@ -12,7 +12,6 @@ kubeProxy:
   image: ${kube_proxy_image}
   podCIDR: ${pod_cidr}
   trustedCertsDir: ${trusted_certs_dir}
-  conntrackMaxPerCore: ${conntrack_max_per_core}
 kubeScheduler:
   image: ${kube_scheduler_image}
   controlPlaneReplicas: ${control_plane_replicas}
diff --git a/assets/terraform-modules/bootkube/variables.tf b/assets/terraform-modules/bootkube/variables.tf
index 5d089b3d..420a05b2 100644
--- a/assets/terraform-modules/bootkube/variables.tf
+++ b/assets/terraform-modules/bootkube/variables.tf
@@ -179,8 +179,3 @@ variable "encrypt_pod_traffic" {
   type        = bool
   default     = false
 }
-
-variable "conntrack_max_per_core" {
-  description = "--conntrack-max-per-core value for kube-proxy. Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore the conntrack-min kube-proxy flag)."
-  type        = number
-}
diff --git a/assets/terraform-modules/packet/flatcar-linux/kubernetes/bootkube.tf b/assets/terraform-modules/packet/flatcar-linux/kubernetes/bootkube.tf
index 39393f87..b04c8725 100644
--- a/assets/terraform-modules/packet/flatcar-linux/kubernetes/bootkube.tf
+++ b/assets/terraform-modules/packet/flatcar-linux/kubernetes/bootkube.tf
@@ -46,6 +46,4 @@ module "bootkube" {
   encrypt_pod_traffic         = var.encrypt_pod_traffic
 
   ignore_x509_cn_check = var.ignore_x509_cn_check
-
-  conntrack_max_per_core = var.conntrack_max_per_core
 }
diff --git a/assets/terraform-modules/packet/flatcar-linux/kubernetes/variables.tf b/assets/terraform-modules/packet/flatcar-linux/kubernetes/variables.tf
index 684af6b4..43b2db08 100644
--- a/assets/terraform-modules/packet/flatcar-linux/kubernetes/variables.tf
+++ b/assets/terraform-modules/packet/flatcar-linux/kubernetes/variables.tf
@@ -213,8 +213,3 @@ variable "ignore_x509_cn_check" {
   type        = bool
   default     = false
 }
-
-variable "conntrack_max_per_core" {
-  description = "--conntrack-max-per-core value for kube-proxy. Maximum number of NAT connections to track per CPU core (0 to leave the limit as-is and ignore the conntrack-min kube-proxy flag)."
-  type        = number
-}
diff --git a/ci/aws/aws-cluster.lokocfg.envsubst b/ci/aws/aws-cluster.lokocfg.envsubst
index bf0428c3..24e11fb3 100644
--- a/ci/aws/aws-cluster.lokocfg.envsubst
+++ b/ci/aws/aws-cluster.lokocfg.envsubst
@@ -42,9 +42,8 @@ EOF
     instance_type = "i3.large"
     spot_price    = "0.08"
     labels        = {
-      "testing.io"          = "yes",
-      "roleofnode"          = "testing",
-      "conntrack-modified"  = "true",
+      "testing.io" = "yes",
+      "roleofnode" = "testing",
     }
     tags = {
       "deployment" = "ci"
@@ -63,24 +62,6 @@ storage:
       group:
         id: 500
 EOF
-      ,
-      <<EOF
-storage:
-  files:
-    - path: /etc/modules-load.d/nf.conf
-      filesystem: root
-      mode: 0644
-      contents:
-        inline: |
-          nf_conntrack
-    - path: /etc/sysctl.d/nf.conf
-      filesystem: root
-      mode: 0644
-      contents:
-        inline: |
-          net.netfilter.nf_conntrack_max=50000
-EOF
-      ,
     ]
   }
 
@@ -91,9 +72,8 @@ EOF
     instance_type = "t2.small"
     spot_price    = "0.01"
     labels        = {
-      "testing.io"          = "yes",
-      "roleofnode"          = "testing",
-      "conntrack-modified"  = "true",
+      "testing.io" = "yes",
+      "roleofnode" = "testing",
     }
     taints        = {
       "nodeType" = "storage:NoSchedule"
@@ -119,24 +99,6 @@ storage:
       group:
         id: 500
 EOF
-      ,
-      <<EOF
-storage:
-  files:
-    - path: /etc/modules-load.d/nf.conf
-      filesystem: root
-      mode: 0644
-      contents:
-        inline: |
-          nf_conntrack
-    - path: /etc/sysctl.d/nf.conf
-      filesystem: root
-      mode: 0644
-      contents:
-        inline: |
-          net.netfilter.nf_conntrack_max=50000
-EOF
-      ,
     ]
   }
 
@@ -144,10 +106,6 @@ EOF
   # Acts as a smoke test to check if API server is functional after addition
   # of extra flags.
   oidc {}
-
-  # Disable kube-proxy setting net.netfilter.nf_conntrack_max so we can
-  # set it per worker pool via CLC snippet.
-  conntrack_max_per_core = 0
 }
 
 component "metrics-server" {}
diff --git a/ci/baremetal/baremetal-cluster.lokocfg.envsubst b/ci/baremetal/baremetal-cluster.lokocfg.envsubst
index f4ec9f45..89d3985f 100644
--- a/ci/baremetal/baremetal-cluster.lokocfg.envsubst
+++ b/ci/baremetal/baremetal-cluster.lokocfg.envsubst
@@ -40,8 +40,6 @@ cluster "bare-metal" {
     "testing.io" = "yes",
     "roleofnode" = "testing",
   }
-
-  conntrack_max_per_core = 65000
 }
 
 component "inspektor-gadget" {}
diff --git a/ci/packet/packet-cluster.lokocfg.envsubst b/ci/packet/packet-cluster.lokocfg.envsubst
index 3921e2ce..ddc6fa02 100644
--- a/ci/packet/packet-cluster.lokocfg.envsubst
+++ b/ci/packet/packet-cluster.lokocfg.envsubst
@@ -62,8 +62,6 @@ EOF
   oidc {}
 
   ignore_x509_cn_check = true
-
-  conntrack_max_per_core = 65000
 }
 
 component "metrics-server" {}
diff --git a/docs/configuration-reference/components/contour.md b/docs/configuration-reference/components/contour.md
index 61b0d472..4c21aaff 100644
--- a/docs/configuration-reference/components/contour.md
+++ b/docs/configuration-reference/components/contour.md
@@ -47,6 +47,10 @@ component "contour" {
     value    = "contour"
     effect   = "NoSchedule"
   }
+
+  envoy {
+    metrics_scrape_interval = "30s"
+  }
 }
 ```
 
@@ -54,12 +58,13 @@ component "contour" {
 
 Table of all the arguments accepted by the component.
 
-| Argument            | Description                                                                                             |    Default     | Type                                                                                                           | Required |
-|---------------------|---------------------------------------------------------------------------------------------------------|:--------------:|:---------------------------------------------------------------------------------------------------------------|:--------:|
-| `enable_monitoring` | Create Prometheus Operator configs to scrape Contour and Envoy metrics. Also deploys Grafana Dashboard. |     false      | bool                                                                                                           |  false   |
-| `node_affinity`     | Node affinity for deploying the operator pod and envoy daemonset.                                       |       -        | list(object({key = string, operator = string, values = list(string)}))                                         |  false   |
-| `service_type`      | The type of Kubernetes service used to expose Envoy. Set as "NodePort" on the **AWS** platform.         | "LoadBalancer" | string                                                                                                         |  false   |
-| `toleration`        | Tolerations that the operator and envoy pods will tolerate.                                             |       -        | list(object({key = string, effect = string, operator = string, value = string, toleration_seconds = string })) |  false   |
+| Argument                        | Description                                                                                             | Default        | Type                                                                                                           | Required |
+|---------------------------------|---------------------------------------------------------------------------------------------------------|----------------|----------------------------------------------------------------------------------------------------------------|----------|
+| `enable_monitoring`             | Create Prometheus Operator configs to scrape Contour and Envoy metrics. Also deploys Grafana Dashboard. | false          | bool                                                                                                           | false    |
+| `node_affinity`                 | Node affinity for deploying the operator pod and envoy daemonset.                                       | -              | list(object({key = string, operator = string, values = list(string)}))                                         | false    |
+| `service_type`                  | The type of Kubernetes service used to expose Envoy. Set as "NodePort" on the **AWS** platform.         | "LoadBalancer" | string                                                                                                         | false    |
+| `toleration`                    | Tolerations that the operator and envoy pods will tolerate.                                             | -              | list(object({key = string, effect = string, operator = string, value = string, toleration_seconds = string })) | false    |
+| `envoy.metrics_scrape_interval` | Interval at which Prometheus will scrape Envoy. Valid only when `enable_monitoring` is set to `true`.   | -              | string                                                                                                         | false    |
 
 
 ## Applying
diff --git a/docs/configuration-reference/platforms/aws.md b/docs/configuration-reference/platforms/aws.md
index 429cf8f8..59835f37 100644
--- a/docs/configuration-reference/platforms/aws.md
+++ b/docs/configuration-reference/platforms/aws.md
@@ -121,8 +121,6 @@ cluster "aws" {
 
   enable_reporting = false
 
-  conntrack_max_per_core = 32768
-
   oidc {
     issuer_url     = var.oidc_issuer_url
     client_id      = var.oidc_client_id
@@ -198,59 +196,59 @@ worker_pool "my-worker-pool" {
 
 ## Attribute reference
 
-| Argument                      | Description                                                                                                                                                                                                                                                                                                  | Default         | Type         | Required |
-|-------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--:-:------------|--:-:---------|--:-:-----|
-| `asset_dir`                   | Location where Lokomotive stores cluster assets.                                                                                                                                                                                                                                                             | -               | string       | true     |
-| `cluster_name`                | Name of the cluster. **NOTE**: It must be unique per DNS Zone and region.                                                                                                                                                                                                                                    | -               | string       | true     |
-| `tags`                        | Optional details to tag on AWS resources.                                                                                                                                                                                                                                                                    | -               | map(string)  | false    |
-| `os_channel`                  | Flatcar Container Linux AMI channel to install from (stable, beta, alpha, edge).                                                                                                                                                                                                                             | "stable"        | string       | false    |
-| `os_version`                  | Flatcar Container Linux version to install. Version such as "2303.3.1" or "current".                                                                                                                                                                                                                         | "current"       | string       | false    |
-| `dns_zone`                    | Route 53 DNS Zone.                                                                                                                                                                                                                                                                                           | -               | string       | true     |
-| `dns_zone_id`                 | Route 53 DNS Zone ID.                                                                                                                                                                                                                                                                                        | -               | string       | true     |
-| `oidc`                        | OIDC configuration block.                                                                                                                                                                                                                                                                                    | -               | object       | false    |
-| `oidc.issuer_url`             | URL of the provider which allows the API server to discover public signing keys. Only URLs which use the https:// scheme are accepted.                                                                                                                                                                       | -               | string       | false    |
-| `oidc.client_id`              | A client id that all tokens must be issued for.                                                                                                                                                                                                                                                              | "clusterauth"   | string       | false    |
-| `oidc.username_claim`         | JWT claim to use as the user name.                                                                                                                                                                                                                                                                           | "email"         | string       | false    |
-| `oidc.groups_claim`           | JWT claim to use as the user’s group.                                                                                                                                                                                                                                                                        | "groups"        | string       | false    |
-| `enable_csi`                  | Set up IAM role needed for dynamic volumes provisioning to work on AWS                                                                                                                                                                                                                                       | false           | bool         | false    |
-| `expose_nodeports`            | Expose node ports `30000-32767` in the security group, if set to `true`.                                                                                                                                                                                                                                     | false           | bool         | false    |
-| `ssh_pubkeys`                 | List of SSH public keys for user `core`. Each element must be specified in a valid OpenSSH public key format, as defined in RFC 4253 Section 6.6, e.g. "ssh-rsa AAAAB3N...".                                                                                                                                 | -               | list(string) | true     |
-| `controller_count`            | Number of controller nodes.                                                                                                                                                                                                                                                                                  | 1               | number       | false    |
-| `controller_type`             | AWS instance type for controllers.                                                                                                                                                                                                                                                                           | "t3.small"      | string       | false    |
-| `controller_clc_snippets`     | Controller Flatcar Container Linux Config snippets.                                                                                                                                                                                                                                                          | []              | list(string) | false    |
-| `region`                      | AWS region to use for deploying the cluster.                                                                                                                                                                                                                                                                 | "eu-central-1"  | string       | false    |
-| `enable_aggregation`          | Enable the Kubernetes Aggregation Layer.                                                                                                                                                                                                                                                                     | true            | bool         | false    |
-| `enable_tls_bootstrap`        | Enable TLS bootstraping for Kubelet.                                                                                                                                                                                                                                                                         | true            | bool         | false    |
-| `encrypt_pod_traffic`         | Enable in-cluster pod traffic encryption. If true `network_mtu` is reduced by 60 to make room for the encryption header.                                                                                                                                                                                     | false           | bool         | false    |
-| `ignore_x509_cn_check`        | Ignore check of common name in x509 certificates. If any application is built pre golang 1.15 then API server rejects x509 from such application, enable this to get around apiserver.                                                                                                                       | false           | bool         | false    |
-| `disk_size`                   | Size of the EBS volume in GB.                                                                                                                                                                                                                                                                                | 40              | number       | false    |
-| `disk_type`                   | Type of the EBS volume (e.g. standard, gp2, io1).                                                                                                                                                                                                                                                            | "gp2"           | string       | false    |
-| `disk_iops`                   | IOPS of the EBS volume (e.g 100).                                                                                                                                                                                                                                                                            | 0               | number       | false    |
-| `network_mtu`                 | Physical Network MTU. When using instance types with Jumbo frames, use 9001.                                                                                                                                                                                                                                 | 1500            | number       | false    |
-| `host_cidr`                   | CIDR IPv4 range to assign to EC2 nodes.                                                                                                                                                                                                                                                                      | "10.0.0.0/16"   | string       | false    |
-| `pod_cidr`                    | CIDR IPv4 range to assign Kubernetes pods.                                                                                                                                                                                                                                                                   | "10.2.0.0/16"   | string       | false    |
-| `service_cidr`                | CIDR IPv4 range to assign Kubernetes services.                                                                                                                                                                                                                                                               | "10.3.0.0/16"   | string       | false    |
-| `cluster_domain_suffix`       | Cluster's DNS domain.                                                                                                                                                                                                                                                                                        | "cluster.local" | string       | false    |
-| `enable_reporting`            | Enables usage or analytics reporting to upstream.                                                                                                                                                                                                                                                            | false           | bool         | false    |
-| `certs_validity_period_hours` | Validity of all the certificates in hours.                                                                                                                                                                                                                                                                   | 8760            | number       | false    |
-| `conntrack_max_per_core`      | Maximum number of entries in conntrack table per CPU on all nodes in the cluster. If you require more fain-grained control over this value, set it to 0 and add CLC snippet setting `net.netfilter.nf_conntrack_max sysctl setting per node pool. See [Flatcar documentation about sysctl] for more details. | 32768           | number       | false    |
-| `worker_pool`                 | Configuration block for worker pools. There can be more than one. **NOTE**: worker pool name must be unique per DNS zone and region.                                                                                                                                                                         | -               | list(object) | true     |
-| `worker_pool.count`           | Number of workers in the worker pool. Can be changed afterwards to add or delete workers.                                                                                                                                                                                                                    | -               | number       | true     |
-| `worker_pool.instance_type`   | AWS instance type for worker nodes.                                                                                                                                                                                                                                                                          | "t3.small"      | string       | false    |
-| `worker_pool.ssh_pubkeys`     | List of SSH public keys for user `core`. Each element must be specified in a valid OpenSSH public key format, as defined in RFC 4253 Section 6.6, e.g. "ssh-rsa AAAAB3N...".                                                                                                                                 | -               | list(string) | true     |
-| `worker_pool.os_channel`      | Flatcar Container Linux channel to install from (stable, beta, alpha, edge).                                                                                                                                                                                                                                 | "stable"        | string       | false    |
-| `worker_pool.os_version`      | Flatcar Container Linux version to install. Version such as "2303.3.1" or "current".                                                                                                                                                                                                                         | "current"       | string       | false    |
-| `worker_pool.labels`          | Map of extra Kubernetes Node labels for worker nodes.                                                                                                                                                                                                                                                        | -               | map(string)  | false    |
-| `worker_pool.taints`          | Map of Taints to assign to worker nodes.                                                                                                                                                                                                                                                                     | -               | map(string)  | false    |
-| `worker_pool.disk_size`       | Size of the EBS volume in GB.                                                                                                                                                                                                                                                                                | 40              | number       | false    |
-| `worker_pool.disk_type`       | Type of the EBS volume (e.g. standard, gp2, io1).                                                                                                                                                                                                                                                            | "gp2"           | string       | false    |
-| `worker_pool.disk_iops`       | IOPS of the EBS volume (e.g 100).                                                                                                                                                                                                                                                                            | 0               | number       | false    |
-| `worker_pool.spot_price`      | Spot price in USD for autoscaling group spot instances. Leave as empty string for autoscaling group to use on-demand instances. Switching in-place from spot to on-demand is not possible.                                                                                                                   | ""              | string       | false    |
-| `worker_pool.target_groups`   | Additional target group ARNs to which worker instances should be added.                                                                                                                                                                                                                                      | []              | list(string) | false    |
-| `worker_pool.lb_http_port`    | Port the load balancer should listen on for HTTP connections.                                                                                                                                                                                                                                                | 80              | number       | false    |
-| `worker_pool.lb_https_port`   | Port the load balancer should listen on for HTTPS connections.                                                                                                                                                                                                                                               | 443             | number       | false    |
-| `worker_pool.clc_snippets`    | CWorker Flatcar Container Linux Config snippets.                                                                                                                                                                                                                                                             | []              | list(string) | false    |
-| `worker_pool.tags`            | Optional details to tag on AWS resources.                                                                                                                                                                                                                                                                    | -               | map(string)  | false    |
+| Argument                      | Description                                                                                                                                                                                |     Default     |     Type     | Required |
+|-------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:---------------:|:------------:|:--------:|
+| `asset_dir`                   | Location where Lokomotive stores cluster assets.                                                                                                                                           |        -        |    string    |   true   |
+| `cluster_name`                | Name of the cluster. **NOTE**: It must be unique per DNS Zone and region.                                                                                                                  |        -        |    string    |   true   |
+| `tags`                        | Optional details to tag on AWS resources.                                                                                                                                                  |        -        | map(string)  |  false   |
+| `os_channel`                  | Flatcar Container Linux AMI channel to install from (stable, beta, alpha, edge).                                                                                                           |    "stable"     |    string    |  false   |
+| `os_version`                  | Flatcar Container Linux version to install. Version such as "2303.3.1" or "current".                                                                                                       |    "current"    |    string    |  false   |
+| `dns_zone`                    | Route 53 DNS Zone.                                                                                                                                                                         |        -        |    string    |   true   |
+| `dns_zone_id`                 | Route 53 DNS Zone ID.                                                                                                                                                                      |        -        |    string    |   true   |
+| `oidc`                        | OIDC configuration block.                                                                                                                                                                  |        -        |    object    |  false   |
+| `oidc.issuer_url`             | URL of the provider which allows the API server to discover public signing keys. Only URLs which use the https:// scheme are accepted.                                                     |        -        |    string    |  false   |
+| `oidc.client_id`              | A client id that all tokens must be issued for.                                                                                                                                            |  "clusterauth"  |    string    |  false   |
+| `oidc.username_claim`         | JWT claim to use as the user name.                                                                                                                                                         |     "email"     |    string    |  false   |
+| `oidc.groups_claim`           | JWT claim to use as the user’s group.                                                                                                                                                      |    "groups"     |    string    |  false   |
+| `enable_csi`                  | Set up IAM role needed for dynamic volumes provisioning to work on AWS                                                                                                                     |      false      |     bool     |  false   |
+| `expose_nodeports`            | Expose node ports `30000-32767` in the security group, if set to `true`.                                                                                                                   |      false      |     bool     |  false   |
+| `ssh_pubkeys`                 | List of SSH public keys for user `core`. Each element must be specified in a valid OpenSSH public key format, as defined in RFC 4253 Section 6.6, e.g. "ssh-rsa AAAAB3N...".               |        -        | list(string) |   true   |
+| `controller_count`            | Number of controller nodes.                                                                                                                                                                |        1        |    number    |  false   |
+| `controller_type`             | AWS instance type for controllers.                                                                                                                                                         |   "t3.small"    |    string    |  false   |
+| `controller_clc_snippets`     | Controller Flatcar Container Linux Config snippets.                                                                                                                                        |       []        | list(string) |  false   |
+| `region`                      | AWS region to use for deploying the cluster.                                                                                                                                               | "eu-central-1"  |    string    |  false   |
+| `enable_aggregation`          | Enable the Kubernetes Aggregation Layer.                                                                                                                                                   |      true       |     bool     |  false   |
+| `enable_tls_bootstrap`        | Enable TLS bootstraping for Kubelet.                                                                                                                                                       |      true       |     bool     |  false   |
+| `encrypt_pod_traffic`         | Enable in-cluster pod traffic encryption. If true `network_mtu` is reduced by 60 to make room for the encryption header.                                                                   |      false      |     bool     |  false   |
+| `ignore_x509_cn_check`        | Ignore check of common name in x509 certificates. If any application is built pre golang 1.15 then API server rejects x509 from such application, enable this to get around apiserver.     |      false      |     bool     |  false   |
+| `disk_size`                   | Size of the EBS volume in GB.                                                                                                                                                              |       40        |    number    |  false   |
+| `disk_type`                   | Type of the EBS volume (e.g. standard, gp2, io1).                                                                                                                                          |      "gp2"      |    string    |  false   |
+| `disk_iops`                   | IOPS of the EBS volume (e.g 100).                                                                                                                                                          |        0        |    number    |  false   |
+| `network_mtu`                 | Physical Network MTU. When using instance types with Jumbo frames, use 9001.                                                                                                               |      1500       |    number    |  false   |
+| `host_cidr`                   | CIDR IPv4 range to assign to EC2 nodes.                                                                                                                                                    |  "10.0.0.0/16"  |    string    |  false   |
+| `pod_cidr`                    | CIDR IPv4 range to assign Kubernetes pods.                                                                                                                                                 |  "10.2.0.0/16"  |    string    |  false   |
+| `service_cidr`                | CIDR IPv4 range to assign Kubernetes services.                                                                                                                                             |  "10.3.0.0/16"  |    string    |  false   |
+| `cluster_domain_suffix`       | Cluster's DNS domain.                                                                                                                                                                      | "cluster.local" |    string    |  false   |
+| `enable_reporting`            | Enables usage or analytics reporting to upstream.                                                                                                                                          |      false      |     bool     |  false   |
+| `certs_validity_period_hours` | Validity of all the certificates in hours.                                                                                                                                                 |      8760       |    number    |  false   |
+| `worker_pool`                 | Configuration block for worker pools. There can be more than one. **NOTE**: worker pool name must be unique per DNS zone and region.                                                       |        -        | list(object) |   true   |
+| `worker_pool.count`           | Number of workers in the worker pool. Can be changed afterwards to add or delete workers.                                                                                                  |        -        |    number    |   true   |
+| `worker_pool.instance_type`   | AWS instance type for worker nodes.                                                                                                                                                        |   "t3.small"    |    string    |  false   |
+| `worker_pool.ssh_pubkeys`     | List of SSH public keys for user `core`. Each element must be specified in a valid OpenSSH public key format, as defined in RFC 4253 Section 6.6, e.g. "ssh-rsa AAAAB3N...".               |        -        | list(string) |   true   |
+| `worker_pool.os_channel`      | Flatcar Container Linux channel to install from (stable, beta, alpha, edge).                                                                                                               |    "stable"     |    string    |  false   |
+| `worker_pool.os_version`      | Flatcar Container Linux version to install. Version such as "2303.3.1" or "current".                                                                                                       |    "current"    |    string    |  false   |
+| `worker_pool.labels`          | Map of extra Kubernetes Node labels for worker nodes.                                                                                                                                      |        -        | map(string)  |  false   |
+| `worker_pool.taints`          | Map of Taints to assign to worker nodes.                                                                                                                                                   |        -        | map(string)  |  false   |
+| `worker_pool.disk_size`       | Size of the EBS volume in GB.                                                                                                                                                              |       40        |    number    |  false   |
+| `worker_pool.disk_type`       | Type of the EBS volume (e.g. standard, gp2, io1).                                                                                                                                          |      "gp2"      |    string    |  false   |
+| `worker_pool.disk_iops`       | IOPS of the EBS volume (e.g 100).                                                                                                                                                          |        0        |    number    |  false   |
+| `worker_pool.spot_price`      | Spot price in USD for autoscaling group spot instances. Leave as empty string for autoscaling group to use on-demand instances. Switching in-place from spot to on-demand is not possible. |       ""        |    string    |  false   |
+| `worker_pool.target_groups`   | Additional target group ARNs to which worker instances should be added.                                                                                                                    |       []        | list(string) |  false   |
+| `worker_pool.lb_http_port`    | Port the load balancer should listen on for HTTP connections.                                                                                                                              |       80        |    number    |  false   |
+| `worker_pool.lb_https_port`   | Port the load balancer should listen on for HTTPS connections.                                                                                                                             |       443       |    number    |  false   |
+| `worker_pool.clc_snippets`    | CWorker Flatcar Container Linux Config snippets.                                                                                                                                           |       []        | list(string) |  false   |
+| `worker_pool.tags`            | Optional details to tag on AWS resources.                                                                                                                                                  |        -        | map(string)  |  false   |
+
 
 ## Applying
 
@@ -267,5 +265,3 @@ To destroy the Lokomotive cluster, execute the following command:
 ```console
 lokoctl cluster destroy --confirm
 ```
-
-[Flatcar documentation about sysctl](https://docs.flatcar-linux.org/os/other-settings/#tuning-sysctl-parameters)
diff --git a/docs/configuration-reference/platforms/baremetal.md b/docs/configuration-reference/platforms/baremetal.md
index a818edab..e055a15b 100644
--- a/docs/configuration-reference/platforms/baremetal.md
+++ b/docs/configuration-reference/platforms/baremetal.md
@@ -92,8 +92,6 @@ cluster "bare-metal" {
 
   encrypt_pod_traffic = true
 
-  conntrack_max_per_core = 32768
-
   oidc {
     issuer_url     = var.oidc_issuer_url
     client_id      = var.oidc_client_id
@@ -128,37 +126,37 @@ os_version = var.custom_default_os_version
 
 ## Attribute reference
 
-| Argument                    | Description                                                                                                                                                                                                                                                                                                  | Default          | Type         | Required |
-|-----------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--:-:-------------|--:-:---------|--:-:-----|
-| `asset_dir`                 | Location where Lokomotive stores cluster assets.                                                                                                                                                                                                                                                             | -                | string       | true     |
-| `cached_install`            | Whether the operating system should PXE boot and install from matchbox /assets cache. Note that the admin must have downloaded the `os_version` into matchbox assets.                                                                                                                                        | "false"          | string       | false    |
-| `cluster_name`              | Name of the cluster.                                                                                                                                                                                                                                                                                         | -                | string       | true     |
-| `controller_domains`        | Ordered list of controller FQDNs. Example: ["node1.example.com"]                                                                                                                                                                                                                                             | -                | list(string) | true     |
-| `controller_macs`           | Ordered list of controller identifying MAC addresses. Example: ["52:54:00:a1:9c:ae"]                                                                                                                                                                                                                         | -                | list(string) | true     |
-| `controller_names`          | Ordered list of controller names. Example: ["node1"]                                                                                                                                                                                                                                                         | -                | list(string) | true     |
-| `k8s_domain_name`           | Controller DNS name which resolves to a controller instance. Workers and kubeconfig's will communicate with this endpoint. Example: "cluster.example.com"                                                                                                                                                    | -                | string       | true     |
-| `labels`                    | Map of extra Kubernetes Node labels for worker nodes.                                                                                                                                                                                                                                                        | -                | map(string)  | false    |
-| `matchbox_ca_path`          | Path to the CA to verify and authenticate client certificates.                                                                                                                                                                                                                                               | -                | string       | true     |
-| `matchbox_client_cert_path` | Path to the server TLS certificate file.                                                                                                                                                                                                                                                                     | -                | string       | true     |
-| `matchbox_client_key_path`  | Path to the server TLS key file.                                                                                                                                                                                                                                                                             | -                | string       | true     |
-| `matchbox_endpoint`         | Matchbox API endpoint.                                                                                                                                                                                                                                                                                       | -                | string       | true     |
-| `matchbox_http_endpoint`    | Matchbox HTTP read-only endpoint. Example: "http://matchbox.example.com:8080"                                                                                                                                                                                                                                | -                | string       | true     |
-| `network_mtu`               | Physical Network MTU.                                                                                                                                                                                                                                                                                        | 1500             | number       | false    |
-| `worker_names`              | Ordered list of worker names. Example: ["node2", "node3"]                                                                                                                                                                                                                                                    | -                | list(string) | true     |
-| `worker_macs`               | Ordered list of worker identifying MAC addresses. Example ["52:54:00:b2:2f:86", "52:54:00:c3:61:77"]                                                                                                                                                                                                         | -                | list(string) | true     |
-| `worker_domains`            | Ordered list of worker FQDNs. Example ["node2.example.com", "node3.example.com"]                                                                                                                                                                                                                             | -                | list(string) | true     |
-| `ssh_pubkeys`               | List of SSH public keys for user `core`. Each element must be specified in a valid OpenSSH public key format, as defined in RFC 4253 Section 6.6, e.g. "ssh-rsa AAAAB3N...".                                                                                                                                 | -                | list(string) | true     |
-| `os_version`                | Flatcar Container Linux version to install. Version such as "2303.3.1" or "current".                                                                                                                                                                                                                         | "current"        | string       | false    |
-| `os_channel`                | Flatcar Container Linux channel to install from ("flatcar-stable", "flatcar-beta", "flatcar-alpha", "flatcar-edge").                                                                                                                                                                                         | "flatcar-stable" | string       | false    |
-| `enable_tls_bootstrap`      | Enable TLS bootstraping for Kubelet.                                                                                                                                                                                                                                                                         | true             | bool         | false    |
-| `encrypt_pod_traffic`       | Enable in-cluster pod traffic encryption. If true `network_mtu` is reduced by 60 to make room for the encryption header.                                                                                                                                                                                     | false            | bool         | false    |
-| `ignore_x509_cn_check`      | Ignore check of common name in x509 certificates. If any application is built pre golang 1.15 then API server rejects x509 from such application, enable this to get around apiserver.                                                                                                                       | false            | bool         | false    |
-| `oidc`                      | OIDC configuration block.                                                                                                                                                                                                                                                                                    | -                | object       | false    |
-| `oidc.issuer_url`           | URL of the provider which allows the API server to discover public signing keys. Only URLs which use the https:// scheme are accepted.                                                                                                                                                                       | -                | string       | false    |
-| `oidc.client_id`            | A client id that all tokens must be issued for.                                                                                                                                                                                                                                                              | "clusterauth"    | string       | false    |
-| `oidc.username_claim`       | JWT claim to use as the user name.                                                                                                                                                                                                                                                                           | "email"          | string       | false    |
-| `oidc.groups_claim`         | JWT claim to use as the user’s group.                                                                                                                                                                                                                                                                        | "groups"         | string       | false    |
-| `conntrack_max_per_core`    | Maximum number of entries in conntrack table per CPU on all nodes in the cluster. If you require more fain-grained control over this value, set it to 0 and add CLC snippet setting `net.netfilter.nf_conntrack_max sysctl setting per node pool. See [Flatcar documentation about sysctl] for more details. | 32768            | number       | false    |
+| Argument                    | Description                                                                                                                                                                            |     Default      |     Type     | Required |
+|-----------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:----------------:|:------------:|:--------:|
+| `asset_dir`                 | Location where Lokomotive stores cluster assets.                                                                                                                                       |        -         |    string    |   true   |
+| `cached_install`            | Whether the operating system should PXE boot and install from matchbox /assets cache. Note that the admin must have downloaded the `os_version` into matchbox assets.                  |     "false"      |    string    |  false   |
+| `cluster_name`              | Name of the cluster.                                                                                                                                                                   |        -         |    string    |   true   |
+| `controller_domains`        | Ordered list of controller FQDNs. Example: ["node1.example.com"]                                                                                                                       |        -         | list(string) |   true   |
+| `controller_macs`           | Ordered list of controller identifying MAC addresses. Example: ["52:54:00:a1:9c:ae"]                                                                                                   |        -         | list(string) |   true   |
+| `controller_names`          | Ordered list of controller names. Example: ["node1"]                                                                                                                                   |        -         | list(string) |   true   |
+| `k8s_domain_name`           | Controller DNS name which resolves to a controller instance. Workers and kubeconfig's will communicate with this endpoint. Example: "cluster.example.com"                              |        -         |    string    |   true   |
+| `labels`                    | Map of extra Kubernetes Node labels for worker nodes.                                                                                                                                  |        -         | map(string)  |  false   |
+| `matchbox_ca_path`          | Path to the CA to verify and authenticate client certificates.                                                                                                                         |        -         |    string    |   true   |
+| `matchbox_client_cert_path` | Path to the server TLS certificate file.                                                                                                                                               |        -         |    string    |   true   |
+| `matchbox_client_key_path`  | Path to the server TLS key file.                                                                                                                                                       |        -         |    string    |   true   |
+| `matchbox_endpoint`         | Matchbox API endpoint.                                                                                                                                                                 |        -         |    string    |   true   |
+| `matchbox_http_endpoint`    | Matchbox HTTP read-only endpoint. Example: "http://matchbox.example.com:8080"                                                                                                          |        -         |    string    |   true   |
+| `network_mtu`               | Physical Network MTU.                                                                                                                                                                  |       1500       |    number    |  false   |
+| `worker_names`              | Ordered list of worker names. Example: ["node2", "node3"]                                                                                                                              |        -         | list(string) |   true   |
+| `worker_macs`               | Ordered list of worker identifying MAC addresses. Example ["52:54:00:b2:2f:86", "52:54:00:c3:61:77"]                                                                                   |        -         | list(string) |   true   |
+| `worker_domains`            | Ordered list of worker FQDNs. Example ["node2.example.com", "node3.example.com"]                                                                                                       |        -         | list(string) |   true   |
+| `ssh_pubkeys`               | List of SSH public keys for user `core`. Each element must be specified in a valid OpenSSH public key format, as defined in RFC 4253 Section 6.6, e.g. "ssh-rsa AAAAB3N...".           |        -         | list(string) |   true   |
+| `os_version`                | Flatcar Container Linux version to install. Version such as "2303.3.1" or "current".                                                                                                   |    "current"     |    string    |  false   |
+| `os_channel`                | Flatcar Container Linux channel to install from ("flatcar-stable", "flatcar-beta", "flatcar-alpha", "flatcar-edge").                                                                   | "flatcar-stable" |    string    |  false   |
+| `enable_tls_bootstrap`      | Enable TLS bootstraping for Kubelet.                                                                                                                                                   |       true       |     bool     |  false   |
+| `encrypt_pod_traffic`       | Enable in-cluster pod traffic encryption. If true `network_mtu` is reduced by 60 to make room for the encryption header.                                                               |      false       |     bool     |  false   |
+| `ignore_x509_cn_check`      | Ignore check of common name in x509 certificates. If any application is built pre golang 1.15 then API server rejects x509 from such application, enable this to get around apiserver. |      false       |     bool     |  false   |
+| `oidc`                      | OIDC configuration block.                                                                                                                                                              |        -         |    object    |  false   |
+| `oidc.issuer_url`           | URL of the provider which allows the API server to discover public signing keys. Only URLs which use the https:// scheme are accepted.                                                 |        -         |    string    |  false   |
+| `oidc.client_id`            | A client id that all tokens must be issued for.                                                                                                                                        |  "clusterauth"   |    string    |  false   |
+| `oidc.username_claim`       | JWT claim to use as the user name.                                                                                                                                                     |     "email"      |    string    |  false   |
+| `oidc.groups_claim`         | JWT claim to use as the user’s group.                                                                                                                                                  |     "groups"     |    string    |  false   |
+
 
 ## Applying
 
@@ -175,5 +173,3 @@ To destroy the Lokomotive cluster, execute the following command:
 ```console
 lokoctl cluster destroy --confirm
 ```
-
-[Flatcar documentation about sysctl](https://docs.flatcar-linux.org/os/other-settings/#tuning-sysctl-parameters)
diff --git a/docs/configuration-reference/platforms/packet.md b/docs/configuration-reference/platforms/packet.md
index 424a1fe2..18d4ee93 100644
--- a/docs/configuration-reference/platforms/packet.md
+++ b/docs/configuration-reference/platforms/packet.md
@@ -120,8 +120,6 @@ cluster "packet" {
 
   certs_validity_period_hours = 8760
 
-  conntrack_max_per_core = 32768
-
   oidc {
     issuer_url     = var.oidc_issuer_url
     client_id      = var.oidc_client_id
@@ -232,7 +230,6 @@ node_type = var.custom_default_worker_type
 | `reservation_ids`                     | Block with Packet hardware reservation IDs for controller nodes. Each key must have the format `controller-${index}` and the value is the reservation UUID. Can't be combined with `reservation_ids_default`. Key indexes must be sequential and start from 0. Example: `reservation_ids = { controller-0 = "<reservation_id>" }`. | -               | map(string)  | false    |
 | `reservation_ids_default`             | Default reservation ID for controllers. The value`next-available` will choose any reservation that matches the pool's device type and facility. Can't be combined with `reservation_ids`                                                                                                                                           | -               | string       | false    |
 | `certs_validity_period_hours`         | Validity of all the certificates in hours.                                                                                                                                                                                                                                                                                         | 8760            | number       | false    |
-| `conntrack_max_per_core`      				| Maximum number of entries in conntrack table per CPU on all nodes in the cluster. If you require more fain-grained control over this value, set it to 0 and add CLC snippet setting `net.netfilter.nf_conntrack_max sysctl setting per node pool. See [Flatcar documentation about sysctl] for more details.                       | 32768           | number       | false    |
 | `worker_pool`                         | Configuration block for worker pools. There can be more than one.                                                                                                                                                                                                                                                                  | -               | list(object) | true     |
 | `worker_pool.count`                   | Number of workers in the worker pool. Can be changed afterwards to add or delete workers.                                                                                                                                                                                                                                          | 1               | number       | true     |
 | `worker_pool.clc_snippets`            | Flatcar Container Linux Config snippets for nodes in the worker pool.                                                                                                                                                                                                                                                              | []              | list(string) | false    |
diff --git a/pkg/assets/generated_assets.go b/pkg/assets/generated_assets.go
index 9c3bba14..c5b7b606 100644
--- a/pkg/assets/generated_assets.go
+++ b/pkg/assets/generated_assets.go
@@ -712,9 +712,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/charts/components/contour/templates/service-monitor.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "service-monitor.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 744,
+			uncompressedSize: 865,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xb4\x92\x4d\x6e\xeb\x30\x0c\x84\xf7\x3e\x05\x2f\x20\x07\x6f\xab\x33\xbc\x76\x13\x20\x7b\x46\x9e\x36\x6a\x25\x51\x10\x99\x00\x45\x90\xbb\x17\x8a\x53\xd8\xfd\x59\x14\x05\xb2\x33\xad\x21\x67\xf8\x81\xe7\xb3\xa3\xf8\x44\xe3\x8e\xd3\x11\x3a\x66\x29\xd1\xa4\xc5\xf2\x3c\xa2\xf0\x3e\x81\x2e\x97\xc1\x39\x37\x70\x8d\x3b\x34\x8d\x52\x3c\xad\x44\x41\x1a\x44\xc7\x20\x79\x73\xfa\x37\xbc\xc6\x32\x79\xda\xa2\x9d\x62\xc0\xc3\xac\x1a\x32\x8c\x27\x36\xf6\x03\x51\xe2\x3d\x92\xf6\x2f\x22\xae\xd5\x13\xca\x49\xde\xae\x65\x43\x02\x2b\x3c\xd5\x26\x19\x76\xc0\x51\x9d\x54\x34\xee\x33\x88\x0a\x67\x2c\xf2\x5e\x69\xe5\x30\xcb\x5f\x10\x2c\x48\x31\x39\xb6\x41\x2b\x42\x9f\x8f\x32\x55\x89\xc5\xae\x66\x8e\xaa\x34\xbb\xb5\xbb\x0c\x6b\x31\xe8\xd5\xb5\xb2\x1d\x3c\x6d\xd4\xd8\x74\xb3\x38\xaf\x2d\xb6\x48\x08\x26\x6d\x4e\x9d\xd9\xc2\xe1\xb1\xbf\xcd\xb5\xfb\x1a\x80\x48\xbf\x37\xfc\x5f\xed\xfd\x69\xf3\x3b\xa2\x5d\x02\xfd\x12\xee\xd2\xf0\x47\xbc\x37\xd1\x4f\x80\x97\x5f\xf7\xe6\xfa\xa1\xef\x64\xfb\x71\xa3\x4c\xfd\x86\xdf\x03\x00\x00\xff\xff\xbb\xe1\x39\x54\xe8\x02\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xb4\x51\x41\x6e\xe3\x30\x0c\xbc\xfb\x15\xfc\x80\x1c\xec\x55\x3f\x58\x60\x77\x2f\x01\x72\x67\xe4\xd9\x46\xad\x24\x0a\x12\x63\xa0\x30\xf2\xf7\x42\xb6\x5b\xa7\x69\x0f\x6d\x81\xdc\x3c\xe6\x0c\x47\x9c\x99\x26\x43\xfe\x3f\xf5\x07\x0e\x67\xd4\x3e\x4a\xf2\x2a\xc5\xa7\x87\x1e\x89\x8f\x01\x74\xb9\x74\xc6\x98\x8e\xb3\x3f\xa0\x54\x2f\xc9\xd2\x15\xc9\x49\x81\xd4\xde\x49\xdc\x8d\xbf\xba\x27\x9f\x06\x4b\x7b\x94\xd1\x3b\xfc\x5d\x58\x5d\x84\xf2\xc0\xca\xb6\x23\x0a\x7c\x44\xa8\xed\x8b\x88\x73\xb6\x84\x34\xca\xf3\x0c\x0b\x02\xb8\xc2\x52\x2e\x12\xa1\x27\x9c\xab\x91\x8c\xc2\x6d\x07\x51\xe2\x88\x8d\xde\x50\xcd\xec\x16\xfa\x23\x9c\x3a\x49\x2a\xe7\xd2\xd5\x0c\xd7\xf6\x23\x0d\x59\x7c\xd2\xd9\xcc\x50\x96\xa2\xab\xdc\x44\x68\xf1\xae\xce\xae\x99\xf5\x64\x69\x57\x95\xb5\xee\x36\xe7\x79\x76\x13\xcd\x2c\xee\x57\xf1\xde\x15\xce\xf8\x9d\x14\x65\xe4\xd0\x42\x6a\x0a\xbf\x62\x4b\xd3\xf4\x1d\x5d\x73\x42\x1a\x16\xf8\x76\xdb\x1e\x01\x4e\xa5\x2c\x71\x45\x56\x77\xfa\xd7\x66\x0b\x36\xb7\x97\x13\xd5\x8f\x82\x3f\x57\x81\xbf\x8b\xfc\x8e\x9d\x6e\x0f\xfa\x62\xab\x9b\xe0\x87\xbd\xae\xa4\xcf\x9a\xdd\x7e\xdd\x3b\xd7\x57\x7e\x4b\xf6\xaa\xd0\x97\x00\x00\x00\xff\xff\xbe\x7a\xad\x06\x61\x03\x00\x00"),
 		},
 		"/charts/components/contour/templates/service.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "service.yaml",
@@ -726,9 +726,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/charts/components/contour/values.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "values.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 496,
+			uncompressedSize: 521,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x84\x91\xbf\x4e\xc3\x40\x0c\x87\x77\x3f\x85\xa5\xcc\x4d\xdb\x85\xe1\x36\x24\x3a\xb0\xb0\xb4\x1b\x62\x38\x2e\x4e\x6a\x72\x39\xa7\x8e\x13\x12\x21\xde\x1d\x25\xfd\xa3\x22\x21\x31\xdd\xe9\xfb\xec\x9f\x65\xb9\x91\xc4\x26\xca\xa9\x72\x80\x48\xc9\xbf\x47\x72\x58\xfa\xd8\x11\x40\x90\x64\xd2\xeb\x6c\xb8\xf1\x15\x39\x2c\x24\xd4\xa4\x39\xcb\xba\x55\xf9\xa0\x60\x97\x92\xf5\xe5\x05\x44\xf3\x95\xc3\x61\x9b\x6f\x37\xf9\x06\x80\xd2\x20\xd3\x9f\x01\x8b\x69\x55\xc6\xe9\xfc\xbd\x6f\x7d\xc8\x37\x80\xd8\x91\x0e\x1c\xe8\x30\xb5\xe4\x00\x92\x14\xf4\x58\x96\x9c\xd8\x26\x87\x5f\xdf\x90\xe1\x2f\x04\x19\x22\x2a\x9d\x7a\x56\x2a\x9e\xfa\x79\xa5\x7d\x38\x52\xd1\x47\x4e\xd5\x73\x95\xe4\x86\x77\x23\x85\xde\x58\xd2\xb9\x07\x97\x9c\x3d\x45\x0a\x26\x7a\x20\x6d\xba\xab\x58\x61\xe3\x2d\x1c\x77\x63\xab\xd4\x75\x2c\xe9\x66\x66\x57\xd3\xe4\x30\x91\x7d\x8a\xd6\x79\x94\x5a\x1a\x31\x1e\x28\x67\xb9\x15\x21\x4a\x4b\xea\x4d\xd4\xe1\x6e\xe4\xce\x3a\x00\x30\x89\x33\x5b\xe2\xf0\xf5\x0d\x32\xbc\x27\x90\xe1\x0a\xa9\x2c\x29\x98\xc3\x17\xb9\xec\x40\x4b\xe4\x3f\x13\xef\x66\x9d\x7a\x1f\x17\x36\xf8\xd8\x93\xc3\xeb\x7d\x7e\x02\x00\x00\xff\xff\x16\xff\xfb\x07\xf0\x01\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x84\x91\xbf\x8e\xdb\x30\x0c\x87\x77\x3e\x05\x01\xcf\x71\x92\xa5\x83\xb6\x02\xcd\x90\xa5\x4b\xb2\x15\x1d\x54\x99\x76\x58\xcb\xa2\x43\xd1\xae\x8d\xe2\xde\xfd\x60\xe7\x0f\x72\xc0\x01\x37\x49\xf8\x7d\xe4\x47\x10\xec\x24\xb1\x89\x72\x6a\x1c\x20\x52\xf2\x7f\x22\x39\xac\x7d\xcc\x04\x10\x24\x99\x0c\xba\x10\xee\x7c\x43\x0e\x2b\x09\x2d\x69\xc9\xb2\xed\x55\xfe\x52\xb0\x7b\xc9\xf6\xfe\x02\xa2\xf9\xc6\xe1\xb8\x2f\xf7\xbb\x72\x07\x40\x69\x94\xf9\x53\xc1\x4a\x7a\x95\x69\xbe\x7d\x5f\x5b\xbf\x95\x3b\x40\xcc\xa4\x23\x07\x3a\xcf\x3d\x2d\x86\x8e\x4c\x39\xe4\x53\x50\xdf\xd3\x31\x19\xe9\xe8\xa3\x03\x48\x52\xd1\xf7\xba\xe6\xc4\x36\x3b\xfc\xff\x06\x05\x7e\x88\xa0\x40\x44\xa5\xeb\xc0\x4a\xd5\x8f\x61\xd9\xf5\x14\x2e\x54\x0d\x91\x53\x73\x6c\x92\x3c\xe3\xc3\x44\x61\x30\x96\x74\xeb\xc1\xd5\x73\xa2\x48\xc1\x44\xcf\xa4\x5d\x7e\x80\x0d\x76\xde\xc2\xe5\x30\xf5\x4a\x39\xb3\xa4\x27\x59\x58\x4b\xb3\xc3\x44\xf6\x4f\xb4\x2d\xa3\xb4\xd2\x89\xf1\x48\x25\xcb\xb3\x08\x51\x7a\x52\x6f\xa2\x0e\x0f\x13\x67\xcb\x00\x60\x12\x97\x6c\xd5\xe1\xaf\xdf\x50\xe0\x6b\x02\x05\x6e\x90\xea\x9a\x82\x39\xfc\x29\xf7\x1d\x68\x55\x7e\x31\xf1\x65\xd6\x75\xf0\x71\xcd\x46\x1f\x07\x72\xf8\x38\xdc\x7b\x00\x00\x00\xff\xff\xe7\x44\x6e\x17\x09\x02\x00\x00"),
 		},
 		"/charts/components/dex": &vfsgen۰DirInfo{
 			name:    "dex",
@@ -5143,9 +5143,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/charts/control-plane/kubernetes/templates/kube-proxy.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "kube-proxy.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 2299,
+			uncompressedSize: 2124,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xac\x54\x4d\x6f\x1b\x37\x10\xbd\xeb\x57\xcc\x21\x40\x9c\x03\xa5\x3a\x45\xd2\x60\x01\x1d\x02\xc9\x6d\x03\xd4\xb2\x60\x35\xb9\x06\x23\x72\x24\x11\xe2\x72\x58\x72\x76\x2b\xd5\xc8\x7f\x2f\xb8\x92\xac\x5d\x79\x5d\x5d\xca\xdb\x0e\xdf\x3c\xbe\x7d\xf3\x81\xc1\x7e\xa3\x98\x2c\xfb\x02\x30\x84\x34\xaa\x6f\x07\x5b\xeb\x4d\x01\x53\xa4\x92\xfd\x82\x64\x50\x92\xa0\x41\xc1\x62\x00\xe0\xb1\xa4\x02\xb6\xd5\x92\x54\x88\xbc\xdb\x1f\x43\x29\xa0\x3e\xc5\xd3\x3e\x09\x95\x03\x00\x87\x4b\x72\x29\x67\x01\x88\xa5\x58\x80\x67\x43\xcd\xe7\xf6\x53\x52\x18\x42\x87\x29\x05\xd2\x19\x9c\xc8\x91\x16\x8e\x87\xc4\x12\x45\x6f\xfe\x68\x31\xbd\xe0\xea\x67\x03\xa8\x82\x41\xa1\x85\x44\x14\x5a\xef\x8f\x32\xf6\x81\x0a\x78\x64\xe7\xac\x5f\x7f\x6d\x00\x4d\x3c\xb6\x23\xa7\x77\x4a\xdc\x7d\xf5\x58\xa3\x75\xb8\x74\x54\xc0\xed\x00\x40\xa8\x0c\xee\x19\xd3\x76\x26\x1f\xd7\xd1\xd9\xa3\xf4\x35\xad\xf9\xa0\xf7\x2c\x28\x96\x7d\x8b\x21\x91\xd6\x5c\x86\x61\x22\x5d\x45\x2b\xfb\x21\xba\xb0\xc1\x61\x4e\x8e\x9e\x84\xd2\xd0\xf2\x28\xb0\x29\xe0\xad\x61\xbd\xa5\x38\x32\xb4\xc2\xca\xc9\xdb\x86\xe2\xe4\x69\x3e\x1b\x4e\x32\x23\xf9\x9b\xe3\xb6\x00\x89\xd5\x49\x53\x88\x96\x33\xf5\xc4\x61\x4a\xb3\xa6\xbe\x87\x12\xaa\x2c\x5c\xe9\x68\xc5\x6a\x74\x83\x93\xa0\x58\x5b\x4d\x9f\xb5\xe6\xca\xcb\xec\x65\x3b\x34\xff\xcd\x8e\x62\xf7\x57\x14\xd0\x6a\x45\x5a\x0a\x98\xf1\x42\x6f\xc8\x54\xee\x6c\x0a\x87\x0c\xe7\x58\xc0\xdd\xce\x26\x49\x3d\x39\x77\x3b\xd2\x95\x5c\x4d\xd1\xec\x05\xad\xa7\xd8\x7a\xb8\xa7\x67\x0f\xc7\x96\xb8\xa6\x02\x9e\x9e\x60\xf8\x0d\x5d\x45\xa9\xf1\x75\x9e\x31\xc3\xe6\x0e\x7e\xfc\x78\x06\x6b\x2e\x4b\xf4\xe6\x5c\x1a\xd5\x47\xa9\x40\x29\xed\xaa\x24\x14\x95\xb6\x26\x8e\x7b\xc9\x03\x9b\xc9\x97\xe9\x63\x9b\x3e\x27\xe6\x0a\x65\xb1\x8a\x6b\x8a\xd1\x1a\x1a\xbf\xb9\x99\x3d\x4c\xef\xbe\xcf\x3e\xdf\xdf\xbd\xeb\x40\x33\x97\x66\xbf\xb2\xeb\xf1\x88\x44\x8f\xce\x0d\x31\x3a\x5f\x75\x32\x1a\x9d\xaa\x64\x43\x63\x1b\x24\x77\x74\xea\xdc\x97\x24\xd1\xea\xa4\x96\xd6\x1b\x85\xc6\x44\x4a\x69\xfc\xe6\xe6\xf7\x87\xc5\x9f\xdf\xbf\xcc\xbb\xaf\x6f\x08\x9d\x6c\xfe\xb9\x8a\x7d\x7a\x52\x60\x57\xe0\x59\xe0\x86\xfe\x82\x1b\xeb\xa5\xc7\x0d\xcd\xde\x4b\x44\xbd\xbd\xc7\xdd\x9c\xe2\x84\x23\xbd\x83\x9f\xdf\xff\xf2\xf1\xd3\xbb\x4b\x87\x9e\xa1\xaa\xc4\x9d\x0a\xd9\x64\x8e\xd4\x6f\x72\x0f\x6d\x9b\x2e\x6b\x23\x6f\xda\x21\xf2\xf5\xb9\xbc\xe7\xce\x79\x2e\x41\xeb\x0e\xa0\xce\xef\xfd\x1a\xb9\x2c\x3a\x61\x80\x95\x25\x67\x1e\x69\x75\x19\x3f\xde\xcc\x51\x36\x45\x33\x98\xc3\x3c\x5f\x79\x82\x7a\xde\x3c\x5a\xf9\x7f\xbe\x28\x28\x55\x1a\xe6\x1e\x6b\xf1\x3a\x5b\x93\xa7\x94\xe6\x91\x97\xd4\xce\xdf\x88\x84\xdf\x48\xba\x94\xa1\x61\x1a\x1d\xcb\xdf\xbd\xe2\x28\x05\xdc\xfe\xf4\xfe\xc3\xc7\x56\xdc\x7a\x2b\x16\xdd\x94\x1c\xee\x17\xb9\x2b\x4d\x2a\xe0\xf6\x43\x0b\x21\xb6\x24\xae\xa4\xef\xf2\xb4\xf3\x26\xec\x85\x76\x1d\x29\x21\xda\xda\x3a\x5a\x93\xe9\xac\x32\x80\x9a\x5d\x55\xd2\x7d\xde\x4d\xa9\x3d\xaa\xe7\x1d\x70\x31\x1a\x00\x65\x06\x1f\x3c\xba\x18\xa5\x16\x28\x12\x9a\x07\xef\xf6\x17\xcf\x9d\x88\x9d\x5d\xe6\xd1\xaa\x5c\x27\xa9\xcd\xec\xec\x72\xf4\x12\x71\x85\x36\x25\xa7\x34\x45\x49\xcd\x6a\xf8\x0f\xcd\x29\xb9\x51\x03\xbc\xc6\x7d\xf0\xa7\x77\x39\x5e\x18\x73\xf8\xbc\xc7\xd0\xf6\xfd\x12\xad\xac\x3f\xad\xbb\xc1\x75\x47\xf2\x4f\x34\xa2\xdb\x95\x7c\xcd\x9e\x2b\x1e\xbc\xce\xd5\xbb\x0c\x24\x66\x91\x66\x92\x89\xa6\x36\xe6\xa9\xff\x37\x00\x00\xff\xff\x69\xef\x73\xb5\xfb\x08\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xac\x54\x4d\x6f\xdb\x46\x10\xbd\xeb\x57\xcc\x21\x40\xd2\x03\xc5\xba\x40\x8a\x82\x80\x0e\x81\xe5\xb6\x01\x6a\xd9\xb0\x9a\x5c\x83\xd1\xee\x48\x1a\x68\xbf\xb0\x3b\x64\xa5\x06\xfe\xef\xc5\x52\xa2\x45\xca\x74\x75\xc9\xde\x38\xf3\xe6\xed\xdb\x37\xc3\xc1\xc0\x5f\x29\x26\xf6\xae\x02\x0c\x21\x95\xcd\xcd\x64\xc7\x4e\x57\x30\x47\xb2\xde\x2d\x49\x26\x96\x04\x35\x0a\x56\x13\x00\x87\x96\x2a\xd8\xd5\x2b\x2a\x42\xf4\xfb\xc3\x29\x94\x02\xaa\x2e\x9e\x0e\x49\xc8\x4e\x00\x0c\xae\xc8\xa4\x5c\x05\x20\x4c\xb1\x02\xe7\x35\xb5\x9f\xbb\xdf\x52\x81\x21\x0c\x98\x52\x20\x95\xc1\x89\x0c\x29\xf1\xf1\x58\x68\x51\xd4\xf6\xaf\x1e\xd3\x2b\xae\x71\x36\x80\x3a\x68\x14\x5a\x4a\x44\xa1\xcd\xe1\x24\xe3\x10\xa8\x82\x27\x6f\x0c\xbb\xcd\x97\x16\xd0\xc6\x63\x3f\xd2\xdd\x63\x71\xff\xc5\x61\x83\x6c\x70\x65\xa8\x82\x9b\x09\x80\x90\x0d\xe6\x05\xd3\x77\x26\x1f\x33\xd0\x39\xa2\xf4\x2d\xad\xf9\xa0\x73\x5e\x50\xd8\xbb\x1e\x43\x22\xa5\xbc\x0d\xd3\x44\xaa\x8e\x2c\x87\x29\x9a\xb0\xc5\x69\x2e\x8e\x8e\x84\xd2\x94\x7d\x19\xbc\xae\xe0\xbd\xf6\x6a\x47\xb1\xd4\xb4\xc6\xda\xc8\xfb\x96\xa2\xf3\x34\x9f\xad\x4f\xb2\x20\xf9\xc7\xc7\x5d\x05\x12\xeb\x4e\x53\x88\xec\x33\xf5\xad\xc1\x94\x16\x6d\x7f\x8f\x2d\x2c\xb2\xf0\x42\x45\x16\x56\x68\x26\x9d\xa0\xd8\xb0\xa2\x4f\x4a\xf9\xda\xc9\xe2\xf5\x38\xb4\xef\xf6\x86\xe2\xf0\x29\x05\xd0\x7a\x4d\x4a\x2a\x58\xf8\xa5\xda\x92\xae\xcd\xd9\x14\x1f\x32\xdc\xc7\x0a\xee\xf6\x9c\x24\x8d\xd4\xdc\xed\x49\xd5\x72\xb5\x44\x79\x27\xc8\x8e\x62\xef\xe2\x91\x99\x3d\x1e\xb6\xb8\xa1\x0a\xbe\x7f\x87\xe9\x57\x34\x35\xa5\xd6\xd7\xc7\x8c\x99\xb6\x39\x78\x7e\x7e\x01\x2b\x6f\x2d\x3a\x7d\x6e\x4d\x31\x46\x59\x40\x51\x28\x53\x27\xa1\x58\x28\xd6\x71\x36\x4a\x1e\xbc\xbe\xfd\x3c\x7f\xea\xd3\xe7\xc2\xdc\xa1\x2c\xb6\xf0\x0d\xc5\xc8\x9a\x66\xef\x3e\x2c\x1e\xe6\x77\xdf\x16\x9f\xee\xef\x7e\x1a\x40\x33\x97\xf2\x6e\xcd\x9b\x59\x49\xa2\xca\xf3\x40\x94\xe7\xd4\xa0\xa2\xd5\x59\x58\xaf\x69\xc6\x41\xf2\x44\xa7\x41\xde\x92\x44\x56\xa9\x58\xb1\xd3\x05\x6a\x1d\x29\xa5\xd9\xbb\x0f\x7f\x3e\x2c\xff\xfe\xf6\xf9\x71\x78\xfb\x96\xd0\xc8\xf6\xdf\xab\x58\x72\xcd\xd9\xaf\x73\x2b\x5e\xde\xd4\xcb\x01\x34\xd9\xa5\xdf\xa3\xb7\xd5\x20\x0c\xb0\x66\x32\xfa\x89\xd6\x97\xf1\x53\xe6\x11\x65\x5b\xb5\x93\x3e\xcd\x03\x9b\x47\x72\xe4\xce\x93\xb6\x1f\x79\xa3\xa0\xd4\x69\x9a\x9b\xd6\xe3\x35\xdc\x90\xa3\x94\x1e\xa3\x5f\x51\xbf\x7e\x2b\x12\xfe\x20\x19\x52\x86\x96\xa9\x3c\xf9\x39\x4c\xf9\x28\x15\xdc\xfc\xfc\xcb\xc7\x5f\x7b\x71\x76\x2c\x8c\x66\x4e\x06\x0f\xcb\xdc\x66\x9d\x2a\xb8\xf9\xd8\x43\x08\x5b\xf2\xb5\x8c\x25\xbb\x25\x72\xeb\x9d\xd0\x7e\x20\x25\x44\x6e\xd8\xd0\x86\xf4\x60\x37\x00\x34\xde\xd4\x96\xee\xf3\xcf\x9e\xfa\xb3\x7f\xfe\xa9\x2e\x66\x0d\xc0\x66\xf0\xd1\xa3\x8b\xd9\xec\x81\x22\xa1\x7e\x70\xe6\x70\x71\x5d\x47\x6c\x78\x95\x67\xb5\x36\x83\xa2\x3e\xb3\xe1\x55\xf9\x1a\x71\x85\x36\x25\x53\x28\x8a\x92\xda\x7f\xed\x7f\x34\xa7\x64\xca\x16\x78\x8d\xfb\xe8\xcf\xe8\xb6\xb9\x30\xe6\xf8\x79\x8f\xa1\xef\xfb\x25\xba\x60\xd7\xed\x8f\xc9\x75\x47\xf2\x23\x5a\xd1\xfd\x4e\xbe\x65\xcf\x15\x0f\xde\xe6\x1a\x5d\x61\x12\xb3\x48\x7d\x9b\x89\xe6\x1c\xf3\x2a\xfb\x2f\x00\x00\xff\xff\x54\xa8\xfd\xad\x4c\x08\x00\x00"),
 		},
 		"/charts/control-plane/kubernetes/templates/kube-scheduler-disruption.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "kube-scheduler-disruption.yaml",
@@ -5239,9 +5239,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/charts/control-plane/kubernetes/values.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "values.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 705,
+			uncompressedSize: 676,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x94\x91\x41\x8f\xd3\x30\x10\x85\xef\xf9\x15\xfe\x03\x75\x9a\x82\x96\xe2\x1b\xa4\x97\x0a\x56\x8a\xb6\xdc\x10\x87\x59\x7b\x92\xb5\xe2\x7a\xc2\xd8\x8e\xba\xff\x1e\xd9\xe9\xa6\x70\xe8\x4a\x28\x17\xeb\x8d\xfd\xde\x97\x37\x9a\x7c\x64\x72\x0e\xf9\x11\x3c\x0c\xc8\xaa\x12\x22\x20\xcf\x56\xe3\x17\xad\x29\xf9\xf8\x0d\x5f\xb3\xa8\xa1\x45\x8e\xcb\xe9\x2a\xd9\x33\x0c\xa8\xc4\xb8\x0f\x72\xd0\x2c\x2d\xd5\x63\x7a\xc6\xcd\xcd\x73\x73\xbe\x9a\xce\x8d\x6c\x3e\xcb\x8f\xf9\xb1\xa3\x64\x3a\xa6\xd9\x9a\x7f\xc2\xda\xe3\xe1\x49\x89\x66\x2b\xcb\x57\xef\xf2\xdd\x89\xcc\x2a\xef\x8a\xdc\x3c\x64\x8b\xc5\xbf\x73\xe0\xf1\x09\x27\x67\x35\x04\x25\x9a\x4a\x88\xc8\x29\x44\x34\x19\x34\x1c\x2c\x2b\x51\xa7\xc0\x75\x78\x01\xc6\x5a\xc3\x46\x23\x47\xdb\x5b\x0d\x11\x43\x95\x51\x3b\xa6\xcb\x7b\x7f\x32\x95\xf9\x0d\xfe\x0e\xd0\xff\xc4\x16\x7c\x1f\x19\xf4\xf8\x08\x97\x0e\xb9\x25\x46\x25\x3e\xec\x3e\x3d\xec\x0b\xd3\x49\xbf\xa0\x49\x6e\x29\xe7\x0e\x57\x58\xef\xfc\x55\xec\x9d\x56\xf2\x83\x96\x7c\x6f\x87\xa3\x6f\x5d\x06\x5d\x6b\xcf\x27\x4d\x8c\xc6\x87\xb2\xd7\x65\x7a\xa0\x33\x58\x7f\x4a\x7d\x6f\x2f\xea\x4d\x94\x8e\x34\xb8\x77\xcb\xbf\xb2\xfe\x4e\xf0\x5a\x40\xad\x9f\xc9\x8d\xf5\x5b\x40\x23\xf7\x72\x7b\x4b\x39\x76\xeb\xb6\x9b\x6d\x85\x51\x9b\x8c\x80\xde\x4c\x64\x7d\x0c\x4a\xfc\xfc\x55\xd0\x1d\xc6\x65\x00\xcf\x0e\x7f\x7c\x3f\x7d\x25\x8a\x21\x32\x4c\x2a\xd7\x8e\xd5\x9f\x00\x00\x00\xff\xff\xdd\x53\x99\x45\xc1\x02\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x94\x91\xc1\x6e\xe2\x30\x10\x86\xef\x79\x0a\xbf\x00\x0e\x46\xab\x15\xeb\xdb\x36\x5c\x50\x5b\x29\x82\xde\xaa\x1e\x8c\x3d\x09\x16\xc6\x93\x8e\xed\x08\xde\xbe\x72\x02\xa1\x3d\x80\x54\xf9\x62\xfd\x63\xcf\xff\xcd\x3f\x1a\x7d\x24\x74\x0e\xe8\x55\x79\xd5\x02\xc9\x82\xb1\x00\xd4\x5b\x0d\xff\xb5\xc6\xe4\xe3\x33\x9c\xb3\xa8\x55\x05\x14\xc7\xdb\x45\xb2\x47\xd5\x82\x64\x87\x65\xe0\xad\x26\x6e\xb1\x3c\xa4\x1d\xcc\x6e\x3d\x67\xc7\x4b\xd3\x5e\x70\xf1\x8f\xff\xc9\x9f\x1d\x26\x53\x13\xf6\xd6\xfc\x30\xab\xd6\xab\x8d\x64\x62\xce\x87\x53\x2e\xf2\xdb\x0e\xcd\x24\x2f\x06\x59\xfc\xcd\x2d\xc6\xfe\xb5\x53\x1e\x36\xd0\x39\xab\x55\x90\x4c\x14\x8c\x45\x4a\x21\x82\xc9\xa0\x61\x65\x49\xb2\x32\x05\x2a\xc3\x5e\x11\x94\x5a\xcd\x34\x50\xb4\x8d\xd5\x2a\x42\x28\x32\x6a\x4d\x78\x7a\x34\x49\x37\xd4\x6f\xf0\x77\x80\x7e\x6b\xbb\xd5\x7b\x30\xc9\x8d\xf3\xdf\xb1\x0e\xd3\x9b\x6f\xd9\xdd\x19\x3c\x7f\xa8\xd0\x37\xb6\x5d\xfb\xca\x65\x96\x29\xd9\x7c\xd3\x48\x60\x7c\x18\x56\x37\x56\x57\x78\x54\xd6\x6f\x53\xd3\xd8\x93\xbc\x8a\xdc\xa1\x56\xee\x61\xbe\x17\xd6\xcf\xa4\xce\x03\xa8\xf5\x3d\xba\x43\x79\x35\x10\x7c\xc9\xe7\x37\x97\x75\x3d\x2d\x54\xcc\x0b\x88\xda\x64\x04\xf0\xa6\x43\xeb\x63\x90\xec\xfd\x63\x40\x77\x10\xc7\x82\xda\x39\x78\x7b\xd9\x3e\x21\xc6\x10\x49\x75\x32\x27\x0b\xc5\x57\x00\x00\x00\xff\xff\xdd\x1e\x58\xed\xa4\x02\x00\x00"),
 		},
 		"/charts/control-plane/lokomotive": &vfsgen۰DirInfo{
 			name:    "lokomotive",
@@ -5417,9 +5417,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/terraform-modules/aws/flatcar-linux/kubernetes/bootkube.tf": &vfsgen۰CompressedFileInfo{
 			name:             "bootkube.tf",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 1522,
+			uncompressedSize: 1467,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x7c\x94\xdd\x6a\x1b\x3d\x10\x86\xcf\xf7\x2a\x06\x87\x40\xf2\x91\x68\xbf\x3a\x4d\x21\x01\x53\xd2\x1f\x7a\xd0\xc3\x50\x72\x10\x8c\x18\x4b\xb3\xb6\xb0\x56\xda\x6a\x66\x1d\x27\x25\xf7\x5e\xe4\xf5\xc6\x8e\x7f\x6a\x0c\x0b\x3b\xcf\xab\x79\x47\x33\xb3\x3e\x1a\xf4\x0c\x7f\x0a\x00\x6c\x9c\x66\x4a\x0b\x4a\x30\x82\x2a\xa6\x1a\xe5\x6c\x70\xca\xea\x94\x07\x17\xb0\xc0\xa4\x8c\x6f\x59\x28\xe9\x80\x35\x75\x6f\x6c\x60\xfd\x12\x03\x9d\x17\xaf\x45\x71\x02\xf7\xe4\xab\xcb\x59\x64\x21\x0b\x3f\xdb\x09\xa5\x40\x42\x0c\xc8\x4c\xc2\x70\x36\x6f\x27\x64\x62\xa8\xdc\xf4\x02\x6a\x0c\xae\x22\x16\x3e\x2f\xea\x68\x5b\x4f\x30\x98\xc4\x28\x19\x19\xac\xdc\x70\x6c\x93\x21\x18\xc1\x40\xa9\xb2\xfb\xbf\x01\x45\x01\xb0\x6d\x06\x76\x7e\xa3\x3d\xbb\xef\xca\xe3\x5d\x1e\x46\xf0\xb8\xba\x08\xb5\x81\xc6\x05\x00\x89\xb1\xc7\x34\x23\xc0\x27\xd6\x29\xb6\x42\xd7\x57\x3a\x91\x89\xc9\xaa\x2c\x60\xf5\x9f\xaa\x7e\xdb\xd0\xeb\x29\xd8\x26\xba\x20\x7c\x48\xef\x02\x0b\x06\x43\xca\xc4\x20\x29\x7a\x4f\x29\xeb\x9b\xe4\x16\x28\xa4\x5d\x93\x8d\xe7\xeb\xd3\xd6\xa5\x3d\xdb\x7d\xa5\x6f\x44\x01\x10\x48\x9e\x62\x9a\xeb\x5a\xda\x23\xf4\x16\x51\x00\x34\xd1\x6a\xe3\xec\xa1\xc3\xd7\x7c\x4f\xe4\xa6\x50\x5a\x38\x43\x07\x05\x1d\xbc\x4d\x6c\x75\xc9\xc6\x1a\x5d\xd0\xdc\x56\x95\x5b\x1e\xec\xd2\x3b\x22\xdf\x5d\xc0\x89\x27\x9d\xa8\x89\x49\x5c\x98\xee\xa7\xda\x25\x36\x22\x9c\x4e\x13\x4d\x51\x5c\x0c\x47\x44\x5b\x44\x01\x90\x87\x4a\x63\xe3\xba\x56\x6b\x5a\x4a\x42\x5d\x79\x9c\x72\x2f\x3b\x4e\xe4\x22\x29\x09\xeb\x05\x7a\x67\x9d\x3c\xeb\x86\x92\x8b\x56\xcf\x62\x9b\xb8\x2f\xf2\x38\x91\x67\xf9\x04\xbe\x39\xce\xbe\x40\x66\x04\x4c\xbe\x82\xf5\x16\xe5\xbc\x9e\x44\x15\x00\xb6\x43\x74\x0e\xeb\x2e\xac\xd7\xe1\x75\x96\x7f\x10\x5d\x96\x2f\x3e\x9a\x39\xa0\x31\xc4\x0c\x12\xe1\xee\xe1\x1e\x6a\x12\xb4\x28\x98\x37\x1e\xd0\xfb\x3c\x10\x9c\xf3\x9d\xac\x24\x33\x91\x86\x6f\xcb\xd2\x46\xc3\x0a\x9f\x58\x61\x8d\x2f\x31\x28\x13\xeb\xf2\xee\xe1\xfe\xfb\xd7\x61\xe9\x51\x88\xa5\xfc\xc5\x94\x7e\xb4\xce\x52\x49\x66\x78\xd9\x0f\xf6\x65\x7f\xbe\x9a\x49\xed\x0b\x80\x49\xf6\x40\x56\xf7\xef\x57\x93\x92\xef\xe9\x71\xf0\xe1\xd3\x8d\x1a\x5e\x7f\x54\xeb\x67\x79\x35\x1c\x8c\xb3\xf1\xbc\xf7\x2c\x09\x1b\x2d\x71\x4e\x81\xf7\xdb\x29\x9e\xf5\x1b\x05\x9f\xc1\xc4\x60\x50\xce\xd6\x4b\xbd\xd9\x2d\xbd\x73\xd4\xb8\xfb\x8c\xe5\x75\xd8\x0f\xf2\x39\xdc\xc2\xe3\x78\x33\x56\xef\xb3\x1c\x37\xb0\x52\x98\xf4\xdc\x88\xce\xbb\x23\x09\xab\xca\x99\x8d\xe5\xbd\x50\x2e\xd2\x4d\x43\x4c\xa4\x97\xd7\xff\xdf\x68\x13\xb4\x99\x91\x99\xaf\x15\x87\x42\xab\x4f\x60\x0c\x41\x12\x9a\xb9\xae\x71\x99\x87\x4a\x9b\x98\xa8\x1f\xb9\x83\xc1\xe2\xb5\xf8\x1b\x00\x00\xff\xff\x2b\xda\x59\x00\xf2\x05\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x7c\x94\x5b\x6b\x2b\x37\x10\xc7\xdf\xf5\x29\x06\x87\x40\x52\x12\x6d\xeb\x34\x85\x04\x4c\x49\x2f\xf4\xa1\x8f\xa1\xe4\x21\x18\x31\x96\x66\x6d\x61\xad\xb4\xd5\xcc\x3a\x97\x43\xbe\xfb\x41\x5e\x6f\xec\xf8\x72\x8c\xc1\xa0\xf9\xfd\x35\xff\xd1\xcc\x38\x24\x8b\x81\xe1\x9b\x02\xc0\xd6\x1b\xa6\xbc\xa2\x0c\x13\xa8\x53\x6e\x50\x2e\x46\xe7\xac\xcf\x79\x74\x05\x2b\xcc\xda\x86\x8e\x85\xb2\x89\xd8\x50\x7f\xe2\x22\x9b\xf7\x14\xe9\x52\x7d\x28\x75\x06\x8f\x14\xea\xeb\x45\x62\x21\x07\xff\x76\x33\xca\x91\x84\x18\x90\x99\x84\xe1\x62\xd9\xcd\xc8\xa6\x58\xfb\xf9\x15\x34\x18\x7d\x4d\x2c\x7c\xa9\x9a\xe4\xba\x40\x30\x9a\xa5\x24\x05\x19\xad\xdd\x70\xea\xb2\x25\x98\xc0\x48\xeb\xaa\xff\x7e\x02\x4a\x01\xec\x9a\x81\xbd\xcf\xe4\xc0\xee\x97\xf2\x78\x9f\x87\x09\x3c\xaf\x1f\x42\x6f\xa1\xa9\x02\x20\xb1\xee\x94\x66\x02\xf8\xc2\x26\xa7\x4e\xe8\xf6\xc6\x64\xb2\x29\x3b\x5d\x04\xac\x7f\xd2\xf5\xff\x2e\x0e\x7a\x8a\xae\x4d\x3e\x0a\x1f\xd3\xfb\xc8\x82\xd1\x92\xb6\x29\x4a\x4e\x21\x50\x2e\xfa\x36\xfb\x15\x0a\x19\xdf\x16\xe3\xe5\xf9\x8c\xf3\xf9\xc0\xf6\x50\xe9\x27\xa1\x00\x22\xc9\x4b\xca\x4b\xd3\x48\x77\x82\xde\x21\x14\x40\x9b\x9c\xb1\xde\x1d\xbb\x7c\xc3\x0f\x44\x69\x0a\xe5\x95\xb7\x74\x54\xd0\xc3\xbb\xc4\x4e\x97\x5c\x6a\xd0\x47\xc3\x5d\x5d\xfb\xd7\xa3\x5d\xfa\x42\x94\xb7\x8b\x38\x0b\x64\x32\xb5\x29\x8b\x8f\xf3\xc3\x54\xfb\xc4\x56\x84\xf3\x79\xa6\x39\x8a\x4f\xf1\x84\x68\x87\x50\x00\x65\xa8\x0c\xb6\xbe\x6f\xb5\xa1\x57\xc9\x68\xea\x80\x73\x1e\x64\xa7\x89\x52\x24\x65\x61\xb3\xc2\xe0\x9d\x97\x37\xd3\x52\xf6\xc9\x99\x45\xea\x32\x0f\x45\x9e\x26\xca\x2c\x9f\xc1\x5f\x9e\x8b\x2f\x90\x05\x01\x53\xa8\x61\xb3\x45\x25\x6f\x20\xd1\x0a\xc0\xf5\x88\x29\x61\xd3\x87\xcd\x26\xbc\xc9\xf2\x03\xa2\xcf\xf2\x47\x48\x76\x09\x68\x2d\x31\x83\x24\x78\x78\x7a\x84\x86\x04\x1d\x0a\x96\x8d\x07\x0c\xa1\x0c\x04\x97\x7c\x67\x6b\xc9\x42\xa4\xe5\xfb\xaa\x72\xc9\xb2\xc6\x17\xd6\xd8\xe0\x7b\x8a\xda\xa6\xa6\x7a\x78\x7a\xfc\xfb\xcf\x71\x15\x50\x88\xa5\xfa\x8f\x29\xff\xd3\x79\x47\x15\xd9\xf1\xf5\x30\xd8\xd7\xc3\xfd\x7a\x21\x4d\x50\x00\xb3\xe2\x81\x9c\x19\xce\xd7\x93\x52\xde\xe9\x79\xf4\xcb\x6f\x77\x7a\x7c\xfb\xab\xde\xfc\x56\x37\xe3\xd1\xb4\x18\x2f\x7b\xcf\x92\xb1\x35\x92\x96\x14\xf9\xb0\x9d\x12\xd8\x7c\x52\xf0\x3b\xd8\x14\x2d\xca\xc5\x66\xa9\xb7\xbb\x65\xf6\xae\x9a\xf6\x7f\x63\x65\x1d\x0e\x83\x7c\x09\xf7\xf0\x3c\xdd\x8e\xd5\xd7\x2c\xa7\x0d\xac\x15\x36\xbf\xb5\x62\xca\xee\x48\xc6\xba\xf6\x76\x6b\xf9\x20\x54\x8a\xf4\xf3\x98\x32\x99\xd7\xdb\x9f\xef\x8c\x8d\xc6\x2e\xc8\x2e\x37\x8a\x63\x21\xf5\xa1\xbe\x07\x00\x00\xff\xff\xd7\x99\xd0\x65\xbb\x05\x00\x00"),
 		},
 		"/terraform-modules/aws/flatcar-linux/kubernetes/bootstrap-configs.tf": &vfsgen۰CompressedFileInfo{
 			name:             "bootstrap-configs.tf",
@@ -5491,9 +5491,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/terraform-modules/aws/flatcar-linux/kubernetes/variables.tf": &vfsgen۰CompressedFileInfo{
 			name:             "variables.tf",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 5212,
+			uncompressedSize: 4954,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xa4\x58\x6f\x6f\xdb\x38\xf2\x7e\xef\x4f\x31\x48\x5f\xd4\x01\x6c\xfd\x9c\x64\xb7\xfd\x15\xd8\xbe\x70\x92\xde\x6e\xae\xf9\x77\x75\xb2\x05\xf6\x70\x10\x68\x6a\x24\x11\xa1\x48\x1d\x87\x74\xec\x1e\xf6\xbb\x1f\x86\x52\x1c\xdb\x92\x73\xe9\xb6\x7d\x51\xbb\xe4\xcc\xf3\x70\x66\xf8\xcc\xd0\x0b\xe1\x94\x98\x6b\x84\x03\xa9\x03\x79\x74\xa9\x11\x15\x1e\xc0\x7f\x06\x00\x7e\x55\x23\xb4\x7f\x3e\x02\x79\xa7\x4c\x31\x00\xc8\x90\xa4\x53\xb5\x57\xd6\xc0\x47\x38\xb8\x37\xea\xdf\x01\xa1\x35\x07\x36\x87\x61\xed\xb0\x46\x93\x61\x06\xde\x42\x66\x28\xfd\x66\x0d\x1e\x1e\x0c\xfe\x1c\x0c\xde\xc0\xf4\xeb\x6c\x30\x78\x06\x7e\x5a\xfe\x1e\xd0\xe9\xd7\x19\x7c\xb1\xc1\xe3\xcf\x27\x70\x7e\x3d\x83\x3f\xac\x41\x18\x62\x52\x24\x20\x1e\x29\xc1\xa5\xa8\x6a\x8d\x89\xb4\x55\x03\xda\x45\x4b\x55\xf6\xc3\x80\x17\xe7\x2d\xe6\x1f\x27\xb7\xd3\xe9\xe9\xe9\xd9\xdf\xa6\x9f\x3f\x9d\x4d\x76\x21\x71\x59\x5b\xc2\xd4\xd8\x0c\x6b\xeb\x3c\xf5\xe1\xce\xad\xd5\x11\x35\x17\x41\xfb\xf6\x3f\x73\xa1\x09\xbb\x5c\x3e\x45\x7f\xc0\xfe\x20\x3a\x84\x93\xc9\x64\x32\x19\x9f\x1c\xbf\x7f\xf7\x1e\x94\x01\x5f\x22\x10\xca\xe0\x94\x5f\x41\xe1\x6c\xa8\xdb\xc8\x2b\x43\x5e\x18\x89\xb4\x49\x4f\x5a\xe3\x9d\xd5\x1a\x5d\x2a\x6d\x30\xbe\x8f\x9e\x09\xd5\x1c\x5d\x87\xe0\x51\x97\xdc\x75\xdc\x09\x36\x87\x67\xbf\x04\x43\x95\x60\x02\x95\xe0\x12\xa1\xdd\xf8\x6c\x10\x60\xd4\x0d\xfc\x8d\x7c\xbc\x81\xaf\x25\x1a\xc8\xac\x32\x45\x3c\x60\xa8\x0b\x27\x32\xa4\x0d\xa8\x5a\x0b\x83\x60\x0d\xf8\x93\x84\x2a\xa1\xf5\xfa\xc0\x8d\xbb\xc7\x12\x4d\x74\x55\x8a\x05\xbb\xe1\x1c\x92\x32\x85\xc6\x6d\x0f\x1c\xd9\xd1\xb3\x93\x52\x10\x18\xeb\x01\x8d\x0d\x45\x09\x15\x56\xd6\xad\x60\x78\xfc\xeb\xe9\x61\xf4\xe6\x2d\xb8\x60\xa0\xb2\x0e\xc1\x97\xc2\x44\xbf\x6b\x64\x9b\xc3\x43\x98\xe3\x58\xd4\x8a\xd0\x2d\xd0\x71\x86\x6a\xe1\x84\xd6\xa8\x47\x40\x16\x1e\x11\x0c\x36\x57\x25\xc4\x7c\xbf\x01\x01\x73\x55\x14\x71\x6f\xe3\x26\x81\xaf\xca\x97\xf0\xdb\x74\x8b\xe9\x06\x49\x2a\x6d\xd0\x19\xcc\x11\x72\x15\x17\xca\x48\x36\xb7\x2e\x3a\xac\x9d\xcd\x82\x8c\x49\x22\xf4\xa1\xa6\x11\x28\xff\x96\xc0\xa1\xb4\x55\xb5\xbe\xaa\x81\x9e\x99\x13\x3c\x32\x64\x3c\xd6\x97\xe9\xd5\x08\xbc\x8d\xae\x0a\xb5\x40\xa8\x35\x1a\xbf\xe2\xc3\x05\x8a\x59\x6c\xa3\x92\x5b\x07\xe8\x65\x06\xc2\x64\x3b\xe7\x4e\x3a\xe5\x73\xe0\x4f\x92\x0a\x33\x15\xaa\x83\x9e\x2a\x3f\x3b\xde\x49\x1f\xfb\xde\x28\xaa\x9d\x2a\xb2\xf4\x1a\xe9\xda\x82\xcf\xb5\xf0\x52\xb8\x1e\xf0\x6b\x56\x31\x9b\xc3\x4d\x8d\x4e\x78\xae\x95\xd9\x8a\x3c\x56\x30\x94\xd6\xa1\x25\xb0\x0e\x5a\xeb\xdd\x6a\xb6\x94\xca\x52\x18\x83\xfa\x7b\xa8\x90\x67\xeb\x1e\x26\xd3\xab\x0b\x68\xfd\xc5\x00\x70\xe9\xdf\xcc\x60\xd8\x18\x8c\x60\x8e\x5e\x8c\x40\xe8\xba\x14\x23\xc0\xac\xc0\x1e\x3e\x0b\x74\xa4\xac\xf9\x1e\x3e\x32\x38\x87\xc6\xf7\x10\xfa\xbd\x71\xc6\xd1\x79\xe2\xd2\x6e\xe6\xa0\x98\x50\xa1\x53\x12\x5a\x48\xa0\x20\x4b\x10\x04\xc7\xc7\xef\x8e\x92\x0f\x1f\x92\x8e\x38\x66\x8a\x1e\x52\x52\xdf\x7a\x13\xb7\x47\x76\x7e\x9a\x74\x69\xcd\xd4\x37\x7c\xe2\xf4\xe9\x74\x06\x0b\xab\x43\xc5\xc5\x0c\xbf\x9e\xf6\x41\xee\x28\xcd\xff\x0c\x48\x51\x1f\xf7\x04\xe3\x8e\x6d\xbb\xa8\x4d\x57\xe0\xda\xcd\x84\xcb\x46\x50\xd4\xc7\x23\x50\xf6\xa8\xf7\xf0\xca\xd6\xbd\x2d\x61\xcf\xe1\x7b\xce\x7e\x71\x73\x3b\xdb\xcb\xe2\x68\xd2\x89\xf9\xa6\xe2\x6b\x99\x92\x51\x75\x8d\xfd\x7d\x49\x2b\xf2\xc3\x26\x26\x87\x5d\xe0\xb3\xb5\x23\xe0\x8f\x42\x19\x74\x70\xa9\x4c\x58\xf2\xf7\x5c\x15\xb0\xf6\xdd\x39\xc7\x3f\xff\xb5\x4d\xca\x8b\x82\xb6\xa4\xbf\x12\xf5\x86\xd1\xc7\xb8\x04\x70\x70\x25\x8c\x28\x30\x3b\x5d\x1d\x30\x83\x4b\xfb\x60\x2b\xeb\xd5\x22\xde\x1d\x80\x83\x33\x87\xc2\xaf\x97\xef\x0d\xd5\x28\x55\xae\x30\xe3\xf5\x3f\xbb\x47\xb8\x89\x9f\x84\x86\x0c\xbd\x50\x9a\x58\x05\xbd\xe0\xde\xc0\x73\x0a\x38\x24\x1b\x9c\xc4\x5d\xb5\x41\xc3\xff\xa6\x92\xd4\x8f\x76\xf3\x19\x7a\x08\x35\x5c\x4c\xaf\xc0\x59\xdd\xb4\x02\xcc\xe2\x5d\xcf\x56\x46\x54\x7c\x99\x62\x3e\x89\x45\x7c\xa1\xf8\x5a\xc5\x1e\x68\xe1\xd1\xba\x87\x96\x68\xdb\xe0\x65\x8c\x7a\x60\xcd\xb2\x66\x93\x2f\x51\x99\x3e\xe0\xea\x2f\xe4\x78\x36\xfb\x0d\xea\x30\xd7\x4a\x02\x3b\x88\xc4\x02\xa1\x83\xb7\x2c\x85\x6f\x77\xe2\x22\x88\xd0\xa7\x99\x72\x0d\xd0\x8e\xaf\x5b\xe1\x4b\x26\x2e\x20\x53\x0e\xa5\xe7\x8e\xf1\x58\xa2\x43\x28\xd0\xb0\xd2\x62\x06\xd1\x03\x6d\xf4\xb3\x5a\x0b\x89\x19\x2b\x6f\xac\x30\xe2\xd1\xc6\xa1\xe7\x31\x62\xcf\xe5\xdd\x62\x64\xd0\x73\x9c\xd2\xca\x87\x7e\x4e\xe5\x8a\x94\x14\x1a\xae\x9b\x8d\x70\x75\x77\x9f\xc0\x3d\x21\x7c\x98\x4c\x8e\x40\x71\x87\xe3\x78\x3f\xb7\x45\xc6\x6c\x9b\xe3\xdf\x43\x35\xb7\x90\x3b\x51\x21\x25\x5d\x3e\xed\x15\xde\xe2\x53\x5a\xf2\xa9\x54\x59\x7f\x84\xce\x2e\xce\xbf\xc0\xc5\xed\xe2\x27\x70\xc2\x14\x18\x83\x45\xa4\x0a\xc3\x9f\xb8\x25\xf2\x6c\x42\x7b\x4f\xde\x91\xad\xa3\x49\x12\xff\xfe\xdf\xd1\xbb\x9d\x4c\xd5\x36\xfb\x2b\x34\x3e\x87\x39\x3a\x83\x9e\xcb\xd1\x66\xdf\xc7\xe4\xb8\x9f\x09\x8f\x07\x4a\xe2\x5e\x36\xbf\xfc\xf2\xe9\xe6\x7c\xf0\x2a\x4a\xad\x2b\x4a\x06\x77\x25\xc2\x11\x79\xb8\xb8\x85\x47\xa5\x35\x17\x92\xc3\x38\x88\x34\x77\x8b\x67\x93\x74\x3d\x9b\x8c\xa2\x76\x1e\x4d\x7c\xb9\xd7\x80\xab\x3d\x33\x94\x0c\x98\xcc\x60\xe3\xd8\x3d\x47\x6e\x8e\x7b\xd2\x7f\xdc\xa7\x87\x56\x66\x2b\xa1\x4c\x4a\x21\xcf\xd5\xb2\x37\x0b\xff\x08\xe8\x14\x36\x57\xae\xd9\xdd\x96\x5d\x1c\xf0\xa3\xdd\x9a\xab\x30\xf4\x88\x0e\x33\x98\xaf\xd6\x54\xe1\xbc\xe5\xa3\xe8\xe9\x7d\x96\x68\xcb\xb5\xde\xb4\x86\xdc\xda\xa4\xa5\x9c\xd0\x42\x26\x5b\x7b\x0e\xe1\xf5\xb9\xdd\x32\xec\x57\x4a\x17\xdf\x3e\xca\x14\x2f\xea\xe5\xf6\x04\x18\x2d\x79\xc0\x2c\x90\x67\x0b\x61\x84\x5e\x79\x25\x79\x6a\x6d\x9d\xc5\x99\xb5\x26\xef\x50\x54\x04\xc3\x33\xa1\x95\xb4\x87\xdd\x66\xd3\x68\x6f\x1f\x2f\x51\x14\x0e\x8b\xa8\x97\xbd\x39\x68\x49\x70\xc4\x37\xea\x6c\xfa\x6c\x05\x97\x62\x85\x0e\x86\x2d\x60\xd3\x40\x5c\xc0\x1e\x79\xea\x6d\x0b\xbc\xb7\x33\x15\x44\x6a\x84\x3a\x4f\x59\x2e\x30\x4b\xb9\x5c\x35\xfa\x5e\x8a\xe7\xcd\xfe\xf6\xd9\xa7\x73\x68\x6c\xa0\xb5\x69\x94\x4b\xeb\xa6\x36\x5a\xf0\x3d\xe4\xfa\x22\xe4\x35\xa5\x73\x6b\x3d\x79\x27\xea\x97\x62\x74\x77\x39\x83\xd3\xa7\x8d\xb1\x68\x3f\x37\x0c\x7a\x94\xb1\x8b\xc6\xda\x8b\xee\x19\x29\xf5\xf6\x01\x0d\xf5\x02\x5e\x2a\xf2\x71\xe0\xe1\x2d\x63\xd5\xbc\x36\x9a\x2f\x4d\x73\xe0\x45\x14\xb2\x8c\x72\xd9\x03\x1f\x5b\x9e\x30\xab\xc3\xa6\x6d\x9e\xa1\xf3\x2a\x57\x52\xf8\x9d\xa7\x31\x3a\x4f\xe9\x42\x68\x95\x29\xbf\x4a\x6b\x74\xca\x66\x69\x69\x83\xeb\xe7\xf5\x7b\xbb\x93\xe1\xf9\x51\xc6\x19\x91\x1b\xbe\x79\x1c\x6d\xac\x5f\x3b\xed\xfd\xff\xfb\x77\x93\xed\x38\x6d\x0b\x57\x8a\x4b\xef\x44\x9a\xeb\xf5\xf4\xd4\xf9\xb1\xc0\x3b\x01\x71\x1d\x6a\xee\xad\xf1\x9d\xc7\x65\x32\xde\x28\x93\x8d\x57\xda\x9e\x60\x6d\xce\x07\x2f\x8d\x71\x68\xa4\x5b\xd5\x3e\xe5\xf6\xe2\x9d\xc8\x73\x25\x5f\xaa\x19\x65\xc6\x4f\xbf\x1c\xd5\x36\x83\xd6\x02\x5a\x2f\xca\x9a\x7d\xb5\xf3\x8a\x1b\xae\x0a\x63\x1d\xa6\xcb\x9f\x27\x1f\x52\x69\x52\x59\xa2\x7c\xe8\xe5\x72\x11\x37\xc2\xd9\x35\xc4\x3d\x31\x4d\x6c\xb5\x95\xbb\x1f\x20\x22\xad\x31\xde\x09\xf9\x90\x56\x62\xc9\x55\x94\xb2\x42\xf7\x52\x19\x8f\xd7\x9b\xc7\x95\x58\x8e\x6b\x74\x63\xde\x0c\x0b\xa1\x03\xae\x3b\xd7\xb8\x76\x76\xb9\x4a\xe0\x4a\x2c\x55\x15\xaa\xb6\x7a\xb8\xec\xae\xa7\x77\x3c\x05\x1a\x8c\x8f\xfd\x56\x8d\x84\x7c\x80\x9a\x87\xf4\xdb\xfb\xd8\x1c\x60\x38\xe1\x05\x8d\x62\xd1\xc8\x86\x56\x95\xf2\x20\x68\xac\x28\xde\xa5\x26\x74\x4d\xfd\x3e\xf3\x51\x66\x03\x3c\xd6\xd4\xe1\x4b\x43\xcf\x7f\x03\x00\x00\xff\xff\x3e\x95\x14\xb8\x5c\x14\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xa4\x58\x5f\x6f\x1b\x37\x12\x7f\xd7\xa7\x18\x38\x0f\xb1\x01\x79\x4f\xb6\xdb\xe4\x02\x34\x0f\xb2\x9d\x6b\x7d\xf1\xbf\x8b\x92\x06\xe8\xe1\xb0\xa0\xc8\xd9\x5d\xc2\x5c\x72\x8f\x43\xca\x56\x0e\xfd\xee\x87\xe1\xae\x65\x49\xbb\x4a\xed\x36\x79\x88\x14\xce\xcc\xef\x37\x7f\x38\x33\xd4\x42\x78\x2d\xe6\x06\x61\x4f\x9a\x48\x01\x7d\x6e\x45\x8d\x7b\xf0\xbf\x11\x40\x58\x36\x08\xdd\x9f\xf7\x40\xc1\x6b\x5b\x8e\x00\x14\x92\xf4\xba\x09\xda\x59\x78\x0f\x7b\x5f\xac\xfe\x6f\x44\xe8\xd4\x81\xd5\x61\xbf\xf1\xd8\xa0\x55\xa8\x20\x38\x50\x96\xf2\x6f\xce\xe2\xc1\xde\xe8\xf7\xd1\xe8\x15\x4c\xbf\xce\x46\xa3\x27\xe0\xc7\xe3\x97\x80\x4e\xbf\xce\xe0\x93\x8b\x01\x7f\x3c\x81\xf3\xeb\x19\xfc\xe6\x2c\xc2\x3e\x66\x65\x06\xe2\x9e\x32\x7c\x10\x75\x63\x30\x93\xae\x6e\x41\xfb\x68\xb9\x56\x7f\x19\xf0\xe2\xbc\xc3\xfc\xed\xe4\x76\x3a\x3d\x3d\x3d\xfb\xc7\xf4\xe3\x87\xb3\xc9\x36\x24\x3e\x34\x8e\x30\xb7\x4e\x61\xe3\x7c\xa0\x21\xdc\xb9\x73\x26\xa1\x16\x22\x9a\xd0\xfd\x67\x21\x0c\x61\x9f\xcb\x87\x64\x0f\xd8\x1e\x24\x83\x70\x32\x99\x4c\x26\x87\x27\xc7\x6f\xdf\xbc\x05\x6d\x21\x54\x08\x84\x32\x7a\x1d\x96\x50\x7a\x17\x9b\x2e\xf2\xda\x52\x10\x56\x22\xad\xd3\x93\xce\x06\xef\x8c\x41\x9f\x4b\x17\x6d\x18\xa2\x67\x63\x3d\x47\xdf\x23\x78\xd4\x27\x77\x9d\x24\xc1\x15\xf0\x64\x97\x60\x5f\x67\x98\x41\x2d\xb8\x44\x68\x3b\x3e\x6b\x04\x18\x75\x0d\x7f\x2d\x1f\xaf\xe0\x6b\x85\x16\x94\xd3\xb6\x4c\x0e\xc6\xa6\xf4\x42\x21\xad\x41\x35\x46\x58\x04\x67\x21\x9c\x64\x54\x0b\x63\x56\x0e\xb7\xe6\xee\x2b\xb4\xc9\x54\x25\x16\x6c\x86\x73\x48\xda\x96\x06\x37\x2d\x70\x64\xc7\x4f\x46\x2a\x41\x60\x5d\x00\xb4\x2e\x96\x15\xd4\x58\x3b\xbf\x84\xfd\xe3\x9f\x4f\x0f\x92\xb5\xe0\xc0\x47\x0b\xb5\xf3\x08\xa1\x12\x36\xd9\x5d\x21\xbb\x02\xee\xe2\x1c\x0f\x45\xa3\x09\xfd\x02\x3d\x67\xa8\x11\x5e\x18\x83\x66\x0c\xe4\xe0\x1e\xc1\x62\x7b\x55\x62\xca\xf7\x2b\x10\x30\xd7\x65\x99\x64\x5b\x33\x19\x7c\xd5\xa1\x82\x5f\xa6\x1b\x4c\xd7\x48\x52\xe5\xa2\x51\x30\x47\x28\x74\x3a\xa8\x12\xd9\xc2\xf9\x64\xb0\xf1\x4e\x45\x99\x92\x44\x18\x62\x43\x63\xd0\xe1\x35\x81\x47\xe9\xea\x7a\x75\x55\x23\x3d\x31\x27\xb8\x67\xc8\xe4\xd6\xa7\xe9\xd5\x18\x82\x4b\xa6\x4a\xbd\x40\x68\x0c\xda\xb0\x64\xe7\x22\xa5\x2c\x76\x51\x29\x9c\x07\x0c\x52\x81\xb0\x6a\xcb\xef\xac\x57\x3e\x7b\xe1\x24\xab\x51\xe9\x58\xef\x0d\x54\xf9\xd9\xf1\x56\xfa\xd8\xf6\x5a\x51\x6d\x55\x91\xa3\xe7\xb4\xae\x0d\xf8\xc2\x88\x20\x85\x1f\x00\xbf\xe6\x2e\xe6\x0a\xb8\x69\xd0\x8b\xc0\xb5\x32\x5b\x52\xc0\x1a\xf6\xa5\xf3\xe8\x08\x9c\x87\x4e\x7b\xbb\x9a\x1d\xe5\xb2\x12\xd6\xa2\x79\x09\x15\x0a\xac\x3d\xc0\x64\x7a\x75\x01\x9d\xbd\x14\x00\x2e\xfd\x9b\x19\xec\xb7\x0a\x63\x98\x63\x10\x63\x10\xa6\xa9\xc4\x18\x50\x95\x38\xc0\x67\x81\x9e\xb4\xb3\x2f\xe1\x23\xa3\xf7\x68\xc3\x00\xa1\x5f\x5b\x63\x1c\x9d\x47\x2e\x9d\x30\x07\xc5\xc6\x1a\xbd\x96\xd0\x41\x02\x45\x59\x81\x20\x38\x3e\x7e\x73\x94\xbd\x7b\x97\xf5\x9a\xa3\xd2\x74\x97\x93\xfe\x36\x98\xb8\x1d\x6d\xe7\x87\x49\x9f\xd6\x4c\x7f\xc3\x47\x4e\x1f\x4e\x67\xb0\x70\x26\xd6\x5c\xcc\xf0\xf3\xe9\x10\xe4\x56\xa7\xf9\xc3\x80\x94\xcd\xf1\x40\x30\x3e\xb3\x6e\x1f\xb5\x9d\x0a\x5c\xbb\x4a\x78\x35\x86\xb2\x39\x1e\x83\x76\x47\x83\xce\x6b\xd7\x0c\x8e\x84\x1d\xce\x0f\xf8\x7e\x71\x73\x3b\xdb\xc9\xe2\x68\xd2\x8b\xf9\x7a\xc7\x37\x32\x27\xab\x9b\x06\x87\xe7\x92\xd1\x14\xf6\xdb\x98\x1c\xf4\x81\xcf\x56\x86\x80\x3f\x0a\x6d\xd1\xc3\xa5\xb6\xf1\x81\xbf\x17\xba\x84\x95\xed\x9e\x1f\xff\xfe\xcf\x26\xa9\x20\x4a\xda\x68\xfd\xb5\x68\xd6\x94\xde\xa7\x23\x80\xbd\x2b\x61\x45\x89\xea\x74\xb9\xc7\x0c\x2e\xdd\x9d\xab\x5d\xd0\x8b\x74\x77\x00\xf6\xce\x3c\x8a\xb0\x3a\xfe\x62\xa9\x41\xa9\x0b\x8d\x8a\xcf\x7f\xef\xbb\x70\x93\x3e\x09\x03\x0a\x83\xd0\x86\xb8\x0b\x06\xc1\xb3\x81\xf7\x14\xf0\x48\x2e\x7a\x89\xdb\xdd\x06\x2d\xff\x9b\x4b\xd2\x7f\x75\x9a\xcf\x30\x40\x6c\xe0\x62\x7a\x05\xde\x99\x76\x14\xa0\x4a\x77\x5d\x2d\xad\xa8\xf9\x32\xa5\x7c\x12\x37\xf1\x85\xe6\x6b\x95\x66\xa0\x83\x7b\xe7\xef\x3a\xa2\xdd\x80\x97\x29\xea\x91\x7b\x96\xb3\xeb\x7c\x89\xaa\xfc\x0e\x97\x7f\x22\xc7\xb3\xd9\x2f\xd0\xc4\xb9\xd1\x12\xd8\x40\x22\x16\x09\x3d\xbc\xe6\x56\xf8\x7a\x2b\x2e\x82\x08\x43\xae\xb4\x6f\x81\xb6\x6c\xdd\x8a\x50\x31\x71\x01\x4a\x7b\x94\x81\x27\xc6\x7d\x85\x1e\xa1\x44\xcb\x9d\x16\x15\x24\x0b\xb4\x36\xcf\x1a\x23\x24\x2a\xee\xbc\xa9\xc2\x88\x57\x1b\x8f\x81\xd7\x88\x1d\x97\x77\x83\x91\xc5\xc0\x71\xca\xeb\x10\x87\x39\x55\x4b\xd2\x52\x18\xb8\x6e\x05\xe1\xea\xf3\x97\x0c\xbe\x10\xc2\xbb\xc9\xe4\x08\x34\x4f\x38\x8e\xf7\xd3\x58\x64\xcc\x6e\x38\xfe\x33\xd6\x73\x07\x85\x17\x35\x52\xd6\xe7\xd3\x5d\xe1\x0d\x3e\x95\xa3\x90\x4b\xad\x86\x23\x74\x76\x71\xfe\x09\x2e\x6e\x17\x3f\x80\x17\xb6\xc4\x14\x2c\x22\x5d\x5a\xfe\xc4\x23\x91\x77\x13\xda\xe9\x79\xaf\x6d\x1d\x4d\xb2\xf4\xf7\x6f\x47\x6f\xb6\x32\xd5\x38\xf5\x67\x68\x7c\x8c\x73\xf4\x16\x03\x97\xa3\x53\x2f\x63\x72\x3c\xcc\x84\xd7\x03\x2d\x71\x27\x9b\x9f\x7e\xfa\x70\x73\x3e\x7a\x16\xa5\xce\x14\x65\xa3\xcf\x15\xc2\x11\x05\xb8\xb8\x85\x7b\x6d\x0c\x17\x92\xc7\xb4\x88\xb4\x77\x8b\x77\x93\x7c\xb5\x9b\x8c\x53\xef\x3c\x9a\x84\x6a\xa7\x02\x57\xbb\xb2\x94\x8d\x98\xcc\x68\xcd\xed\x01\x97\x5b\x77\x4f\x86\xdd\x7d\x7c\x68\x29\x57\x0b\x6d\x73\x8a\x45\xa1\x1f\x06\xb3\xf0\xaf\x88\x5e\x63\x7b\xe5\x5a\xe9\xae\xec\xd2\x82\x9f\xf4\x56\x5c\x85\xa5\x7b\xf4\xa8\x60\xbe\x5c\x51\x85\xf3\x8e\x8f\xa6\xc7\xf7\x59\x66\x1c\xd7\x7a\x3b\x1a\x0a\xe7\xb2\x8e\x72\x46\x0b\x99\x6d\xc8\x1c\xc0\xf3\x73\xbb\xa1\x38\xdc\x29\x7d\x7a\xfb\x68\x5b\x7e\xb7\x5f\x6e\x6e\x80\x49\x93\x17\xcc\x12\x79\xb7\x10\x56\x98\x65\xd0\x92\xb7\xd6\xce\x58\xda\x59\x1b\x0a\x1e\x45\x4d\xb0\x7f\x26\x8c\x96\xee\xa0\x3f\x6c\xda\xde\x3b\xc4\x4b\x94\xa5\xc7\x32\xf5\xcb\xc1\x1c\x74\x24\x38\xe2\x6b\x75\x36\x7d\xd2\x82\x4b\xb1\x44\x0f\xfb\x1d\x60\x3b\x40\x7c\xc4\x81\xf6\x34\x38\x16\x58\xb6\xb7\x15\x24\x6a\x84\xa6\xc8\xb9\x5d\xa0\xca\xb9\x5c\x0d\x86\x41\x8a\xe7\xad\x7c\xf7\xec\x33\x05\xb4\x3a\xd0\xe9\xb4\x9d\xcb\x98\xb6\x36\x3a\xf0\x1d\xe4\x86\x22\x14\x0c\xe5\x73\xe7\x02\x05\x2f\x9a\xef\xc5\xe8\xf3\xe5\x0c\x4e\x1f\x05\x53\xd1\x7e\x6c\x19\x0c\x74\xc6\x3e\x1a\xf7\x5e\xf4\x4f\x48\x79\x70\x77\x68\x69\x10\xf0\x52\x53\x48\x0b\x0f\x8b\x1c\xea\xf6\xb5\xd1\x7e\x69\x87\x03\x1f\xa2\x90\x55\x6a\x97\x03\xf0\x69\xe4\x09\xbb\x3c\x68\xc7\xe6\x19\xfa\xa0\x0b\x2d\x45\xd8\x7a\x1a\xa3\x0f\x94\x2f\x84\xd1\x4a\x87\x65\xde\xa0\xd7\x4e\xe5\x95\x8b\x7e\x98\xd7\xaf\x9d\x24\xc3\xf3\xa3\x8c\x33\x22\xd7\x6c\xf3\x3a\xda\x6a\x3f\x77\xdb\xfb\xfb\xdb\x37\x93\xcd\x38\x6d\x36\xae\x1c\x1f\x82\x17\x79\x61\x56\xdb\x53\xef\xc7\x82\xe0\x05\xa4\x73\x68\x78\xb6\xa6\x77\x1e\x97\xc9\xe1\x5a\x99\xac\xbd\xd2\x76\x04\x6b\x7d\x3f\xf8\xde\x1a\x87\x56\xfa\x65\x13\x72\x1e\x2f\xc1\x8b\xa2\xd0\xf2\x7b\x35\xa3\xed\xe1\xe3\x2f\x47\x8d\x53\xd0\x69\x40\x67\x45\x3b\xbb\xab\x76\x9e\x71\xc3\x75\x69\x9d\xc7\xfc\xe1\xc7\xc9\xbb\x5c\xda\x5c\x56\x28\xef\x06\xb9\x5c\x24\x41\x38\xbb\x86\x24\x93\xd2\xc4\x5a\x1b\xb9\x7b\x29\x91\xff\x07\x00\x00\xff\xff\x3b\x16\x7c\xeb\x5a\x13\x00\x00"),
 		},
 		"/terraform-modules/aws/flatcar-linux/kubernetes/versions.tf": &vfsgen۰CompressedFileInfo{
 			name:             "versions.tf",
@@ -5731,9 +5731,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/terraform-modules/bare-metal/flatcar-linux/kubernetes/bootkube.tf": &vfsgen۰CompressedFileInfo{
 			name:             "bootkube.tf",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 1335,
+			uncompressedSize: 1280,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x7c\x94\x41\x8b\xdb\x3c\x10\x86\xef\xfa\x15\x43\xf6\xf2\x7d\xb0\x4d\x7b\x29\xb4\x85\xd0\x4b\x6f\x3d\xf6\x18\x96\x41\x91\xc6\x8e\xb0\xac\x31\xa3\x71\x9a\xa5\xf4\xbf\x17\xd9\x4e\x62\x12\x3b\x21\xb7\x79\x1e\xbd\x92\x66\xe4\x17\xf8\x45\xb1\xfa\x70\xe4\xac\xe4\xe1\x67\x7f\x20\x49\xa4\x94\xc1\xe6\x4c\x9a\xe1\xbf\xa6\x3f\x90\xe3\x54\x85\xfa\x15\x5a\x9b\x42\x45\x59\xf3\xff\xa6\x65\xdf\x47\x82\xcd\x81\x59\x0b\xb2\x81\x3f\x06\x20\x73\x2f\x8e\x60\x07\x9b\xed\xf6\xe3\xf8\xbf\x02\xc6\x00\xb8\xd8\x67\x25\xc1\x64\x5b\x82\x85\xdf\x0e\x4e\x56\xb6\x73\xca\x00\xd8\x2e\x60\x26\x39\x91\xe4\x25\x07\x76\xb0\x2f\x56\xf3\x25\xa3\xe7\xd6\x86\x34\x88\x6f\x06\x80\xd4\xf9\x67\xea\x14\xc7\x49\x85\x63\x24\x99\xfc\x7c\x51\x29\xf9\x8e\x43\xd2\x05\x79\x07\xfb\x92\x30\xdc\x12\xfa\x20\x8b\x3b\xbb\x24\x5c\x29\x03\x90\x48\x7f\xb3\x34\xd8\x6a\xff\xc4\x98\x51\x33\x27\x74\x68\x7b\x65\x4f\x4a\x4e\x03\x27\x6c\x49\x8f\xec\xef\x9c\x15\xca\x00\x74\xec\xd1\x05\xbf\xb6\xd9\x69\x9d\x0b\x55\xfa\x49\x72\x0a\x8e\x56\xa5\x51\x98\x53\xb3\x26\x4f\xcd\xc8\x7d\x55\x85\xf3\xe3\xad\x2f\x51\xe5\xe2\x93\x3d\x44\x42\xa1\x8e\x45\x43\xaa\x97\x23\xef\xa9\x9b\x68\xeb\x5a\xa8\xb6\xe5\xe0\x4f\xc4\x19\x65\x00\xca\x7c\xa2\xed\xc2\x38\x2a\x48\x67\x15\x8b\x55\xb4\x75\x9e\xab\xeb\xd4\x30\xda\x24\x9a\xf1\x64\x63\xf0\x41\xdf\xb1\x23\x09\xec\xf1\xc8\xbd\xe4\xcb\x89\xd7\x89\xb2\xc0\x0b\xfc\x08\xb9\x6c\x0e\xf4\x48\x90\x29\x56\x30\xbd\xca\x12\x1c\x49\xb7\x06\xc0\x8f\x08\x96\x32\x8e\x65\x9c\xca\x53\xca\x13\xa2\xa4\x94\xe7\x98\x55\x6c\x87\xca\x0d\xa5\xfc\x78\x35\x1a\x33\x5e\x29\xf8\x0e\xfb\xc8\xce\xc6\xf9\x2b\xb9\x5b\xe3\x15\x46\xa2\x0c\xdf\x63\xf5\x0d\xbe\x8d\x4f\x65\x71\xf9\xf5\xe4\xc1\x70\xf2\xde\x29\x96\x81\x54\xb1\x55\x15\xdc\x6d\xaf\x0f\xa5\x72\xba\x50\x27\x16\xc2\xf3\xe7\x4f\x5f\xd1\x25\x74\x47\x72\xcd\x64\x2c\x95\x86\xbe\x71\x4a\x2a\xd6\x35\xd8\xda\x73\x69\x0a\x3a\x16\xba\x7d\x1a\x16\x8a\xe6\xaf\xf9\x17\x00\x00\xff\xff\x69\x4a\xe4\xb2\x37\x05\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x7c\x93\xcf\x8a\xdb\x30\x10\x87\xef\x7a\x8a\x21\x7b\x69\x61\x9b\xf6\x52\x68\x0b\xa1\x97\xde\x7a\xec\x31\x2c\x83\x22\x8d\x6d\x61\x59\x32\x33\xe3\x34\x4b\xe9\xbb\x2f\x8a\x9d\xac\x49\xec\x18\xdf\xe6\xfb\xf4\xd3\x9f\x99\x27\xf8\x43\xb1\xfa\xd4\x64\x51\xf2\xf0\x7b\x38\x10\x27\x52\x12\xb0\x22\xa4\x02\x1f\xda\xe1\x40\x2e\xa7\x2a\xd4\xcf\xd0\xd9\x14\x2a\x12\x95\x8f\xa6\xcb\x7e\x88\x04\x9b\x43\xce\x5a\x90\x0d\xfc\x33\x00\x92\x07\x76\x04\x3b\xd8\x6c\xb7\x9f\xc7\xff\x0a\x18\x03\xe0\xe2\x20\x4a\x8c\xc9\x76\x04\x0b\xdf\x0e\x8e\x96\xb7\x73\xca\x00\xd8\x3e\xa0\x10\x1f\x89\x65\xc9\x81\x1d\xec\x8b\xd5\x7e\x13\xf4\xb9\xb3\x21\x9d\xc5\x17\x03\x40\xea\xfc\x23\x75\x8a\xcb\x49\x39\xc7\x48\x3c\xf9\x72\x51\x29\xf9\x3e\x87\xa4\x0b\xf2\x0e\xf6\x25\xe1\x7c\x4b\xe8\x03\x2f\xee\xec\x92\x70\xa5\x0c\x40\x22\xfd\x9b\xb9\xc5\x4e\x87\x07\xc6\x8c\x9a\x39\xa1\x47\x3b\x68\xf6\xa4\xe4\x34\xe4\x84\x1d\x69\x93\xfd\x8d\xb3\x42\x19\x80\x3e\x7b\x74\xc1\xaf\x6d\x76\x5a\xe7\x42\x95\xf7\x24\x3e\x06\x47\xab\xd2\x28\xcc\xa9\xd9\x23\x4f\x8f\x21\x43\x55\x85\xd3\xfd\xad\x2f\x51\xe5\xe2\x93\x3d\x44\x42\xa6\x3e\xb3\x86\x54\x2f\x47\xde\x52\xef\xa2\xad\x6b\xa6\xda\x96\x83\x3f\x10\x67\x94\x01\x28\xfd\x89\xb6\x0f\x63\xab\x20\x9d\x94\x2d\x56\xd1\xd6\x32\x57\xd7\xa9\x73\x6b\x13\xab\xe0\xd1\xc6\xe0\x83\xbe\x62\x4f\x1c\xb2\xc7\x26\x0f\x2c\x97\x13\xaf\x13\x65\x81\x27\xf8\x15\xa4\x6c\x0e\xb4\x21\x10\x8a\x15\x4c\x53\x59\x82\x23\xe9\xd6\x00\xf8\x11\xc1\x52\xc6\xb1\x8c\x53\x79\x4a\x79\x40\x94\x94\x32\x8e\xa2\x6c\x7b\xd4\xdc\x52\x92\xfb\xab\xd1\x28\x78\xa5\xe0\x27\xec\x63\x76\x36\xce\xa7\xe4\x66\x8d\x67\x18\x89\xd2\x7c\xf7\xd5\x17\xf8\x31\x8e\xca\xe2\xf2\xeb\xc9\x67\xc3\xf1\x6b\xaf\x58\x1a\x52\xd9\x56\x55\x70\xef\x7b\xbd\x2b\x95\xd3\x85\x3a\x65\x26\x3c\x7d\xfd\xf2\x1d\x5d\x42\xd7\x90\x6b\x27\x63\xa9\x64\xfe\x9b\xb7\x00\x00\x00\xff\xff\x0e\xf6\x7d\x82\x00\x05\x00\x00"),
 		},
 		"/terraform-modules/bare-metal/flatcar-linux/kubernetes/bootstrap-configs.tf": &vfsgen۰CompressedFileInfo{
 			name:             "bootstrap-configs.tf",
@@ -5805,9 +5805,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/terraform-modules/bare-metal/flatcar-linux/kubernetes/variables.tf": &vfsgen۰CompressedFileInfo{
 			name:             "variables.tf",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 5811,
+			uncompressedSize: 5553,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xb4\x58\x59\x6f\x1b\x47\x12\x7e\xe7\xaf\x28\x48\x0f\x96\x00\x71\x44\xc9\xf1\x11\x22\x79\xf0\x52\x5a\xc4\x88\x25\x2b\x91\x9c\x2c\x10\x04\x83\x62\x77\x0d\xa7\xc1\x9e\xee\x49\x57\x0f\x0f\x04\xf9\xef\x8b\xee\x39\x78\x68\xa8\x95\x13\xad\x5f\x04\x92\x75\x7c\xf5\xd5\xd9\x5e\xa0\x53\x38\xd5\x04\x47\x42\x57\xec\xc9\xa5\x06\x0b\x3a\x82\x3f\x07\x00\x7e\x5d\x12\x34\xff\xbe\x07\xf6\x4e\x99\xd9\x00\x40\x12\x0b\xa7\x4a\xaf\xac\x81\xef\xe1\xe8\x8b\x51\x7f\x54\x04\x8d\x3a\x44\xf5\xc1\x5f\x83\xc1\x31\x4c\xd1\xd1\xb0\x20\x8f\x7a\x30\xd8\xf8\x29\xd0\x8b\x7c\x6a\x57\x69\xee\x7d\x99\x92\x91\xa5\x55\xc6\x7f\x8d\xc7\x9b\xc6\x02\xfc\xf0\xf0\x70\x07\x8e\x50\x0e\xad\xd1\x6b\x68\x6d\xc1\x09\x25\xb3\x04\x82\xfd\xf1\xf9\x79\xeb\x2f\xa1\x15\x16\xa5\xa6\x44\xd8\x62\xfc\x7e\xf4\x7e\x74\x1a\x61\x6e\x80\x59\x4e\x45\x8e\xc6\x90\xfe\x1a\x30\x93\x5a\x05\x32\xeb\x00\x61\x62\x1d\x7d\xbe\x87\x89\x35\x1e\x95\x21\x07\x9f\x94\xa9\x56\x20\xc9\xa9\x05\x7a\xb5\x20\x38\x11\xd6\x91\xe5\x21\xfb\xe0\xf5\x0c\x9a\x8f\x53\xf2\xd8\x7d\x40\x5d\xe6\x78\x06\x99\x46\x2f\xd0\x75\xa2\xed\xe7\x5a\xb6\xfd\x14\x85\x7b\x62\x59\x90\x63\x65\xcd\xd7\xc4\xf2\x4b\xad\xf2\xec\x58\xbc\x85\xbb\xff\x5c\x03\x1a\x09\xca\xb0\x47\xad\xff\xaf\xe1\x1d\x43\x81\x22\x57\x86\x78\x70\x0c\x0f\xe4\x1c\x66\xd6\x15\xaf\x18\x84\xab\x24\xc1\x51\x0c\x92\xd7\xec\xa9\x38\x02\x69\x89\xc1\x58\x0f\xa5\xb3\x25\x39\xbd\x06\xae\xca\xd2\x3a\x0f\x5a\xb1\x67\xb0\x19\x14\x58\x32\xb0\x85\x25\x81\xb4\xe0\x73\xc5\xc9\x36\x87\xc2\x1a\xef\xac\xd6\x4d\x4f\x70\x1f\x93\xc1\xd6\x49\x4d\xe7\xe9\x63\x3e\x3f\x3b\x49\x8e\x64\x94\x0a\x0e\x37\x16\x63\x9b\x70\x53\xa8\xbf\x19\x2b\xe9\xe2\xf7\xfd\x1c\x6e\xf9\x2f\x50\xbc\xac\x7b\x25\xc9\x78\x95\xad\x95\x99\xc1\xcd\x87\x09\xa0\x94\x8e\x98\x37\x90\xde\x5c\x8e\xdf\x7c\x33\x1e\x8d\xc6\x78\x31\xfe\x56\x8c\x91\x9e\x82\x27\x6d\x81\xca\xbc\x2c\xc2\x7f\xff\x74\x75\xbb\x4b\xd0\x76\x03\x3f\x42\xb3\xb4\x6e\xfe\x72\x89\xaa\xad\x3d\x4e\xd2\xe5\x19\x84\x3f\xaf\x0f\xb9\x7f\x99\x3c\x35\xde\x9f\x9f\xa3\xe9\xe5\xf8\x32\x1b\xbf\x7f\x7b\x06\xdd\x57\xe2\xf5\xf8\xed\xc5\xf8\xdd\xbb\x43\x48\x5f\x2c\x65\x0d\xd8\x47\xe9\xba\xdc\x4e\x57\x43\xdb\x93\x19\x14\x5a\xa4\x6c\x54\x59\x92\xef\x85\x55\x60\x79\x18\xd5\x0d\x96\x90\x39\x5b\xb4\x13\xa2\x49\x9d\xb7\x9b\x6e\xdf\x9f\x63\x13\x6b\x32\x35\x83\xce\x65\x34\x9a\x61\xa5\x7d\xe3\xf0\xcf\xbf\x76\x01\x6a\x9c\x92\xfe\x7b\xd0\x6c\x06\xb5\x76\x1c\xad\x6d\x75\x59\x49\x9c\x1c\xf2\x7b\x1c\x9a\x21\x53\xb3\xca\x61\xb0\xb4\x0d\x64\xfe\x9e\x9b\xfc\x6d\x2d\xeb\xfd\xb5\xb4\xe9\xa4\xab\xdb\xfb\x48\x07\x2c\x73\x25\x72\x70\xc4\x56\x2f\x6a\x72\x70\x67\x26\x84\x11\x6e\x04\x25\xf0\x6b\x04\xc8\x71\xb0\xcf\xab\x29\xd5\x48\x5e\x31\x2c\x95\xd6\x20\x6c\x51\x54\x46\x09\xf4\x04\x4b\xe5\xf3\x38\x39\xf7\x97\x6f\x73\x0e\x6c\x67\xfc\xf4\xe8\xd0\x22\xda\xa1\x99\x39\x4f\xe7\xb4\xfe\x1b\xa5\x79\x7f\xff\x03\x94\xd5\x54\x2b\x01\xc1\x40\xe4\xba\x62\x72\xf0\x2a\x2c\x9e\x57\x7b\xf5\x86\xcc\xe4\x53\xa9\x5c\x2f\x7f\x77\x18\x02\x0b\x0c\x49\xe5\x48\x78\xeb\xd6\xb0\xcc\xc9\x11\xcc\xc8\x90\x43\x4f\x12\xa2\x05\x06\xce\x6d\xa5\x25\x4c\x09\x4a\x8d\x82\x64\xd8\x81\xb1\xd4\x18\x98\x84\x23\xcf\xcf\x8c\xdc\x90\x0f\xa5\x91\x16\xbe\xea\xc7\x94\xaf\x59\x09\xd4\x70\x5b\x0b\xc2\xcd\xc3\x97\xe4\xb1\x69\x53\x15\x53\x72\xfd\xa6\x55\x99\x62\xe5\xad\x24\x4f\x22\x98\x4d\x0b\xf2\xb9\x95\xbd\xee\x6e\xe2\x4f\x91\x84\x4e\x05\x7c\x4e\x90\x5b\xf6\xf0\xf1\x6e\xf1\x4d\x3b\x92\x0e\x86\xb7\x5f\xda\x47\x99\x72\xec\x87\x99\xad\x8c\xdc\x4b\x47\x69\x65\x2a\x94\xec\xcf\xc6\xe4\xe3\xd5\xcf\xb5\x47\x87\x66\x16\x0f\x0f\x64\x56\x33\x03\x3f\x56\x53\x72\x86\x3c\x31\x94\x56\x7e\x05\x92\x8b\x51\x72\x99\x8c\x92\xd1\xf9\xc5\xdb\x3d\x24\x4c\x6e\xa1\x04\x1d\x44\xf3\xdd\x77\xd7\x9f\xaf\x06\xcf\x82\xd4\x98\xe2\x64\xf0\x90\x13\x5c\x44\xda\xea\x26\x9a\x52\x68\x44\x72\x0b\x92\xb1\x4e\x43\x9b\xa5\x58\xaa\xf8\x95\x3b\x8b\x3c\x5f\x8c\x7c\x7e\x50\x21\x94\xb4\x34\x9c\x0c\x02\x98\xc1\x56\xd8\x3d\x21\xd7\xe1\xbe\xde\x0e\xf7\x18\x6c\x8c\x67\xf7\x36\x6f\xdf\x00\xcd\x74\xe1\x2a\xcb\xd4\xaa\x37\x23\x3f\x55\xe4\x14\xd5\x3d\xd6\xec\x92\x76\x18\x10\xd4\x7a\x1d\x6e\x34\xbc\x8c\x3b\x63\xba\xee\x60\xc3\x55\x83\x4d\x71\x37\x2b\xb4\x0d\xc5\x5d\xcf\x8f\xcc\xda\xa4\x81\x9f\xf0\x42\x24\x3b\x32\xa7\xf0\xfc\x3c\xef\x28\xee\x65\x5a\xda\xa5\xd1\x16\x65\x5a\x3a\xeb\xad\xb0\xff\xeb\xf0\xdf\x31\x1c\x9e\x17\xcd\xd6\xd8\xed\xd2\xc6\x16\xa8\x70\x1b\x37\xc3\xa1\xe2\x58\x21\xad\xc3\xc8\xd2\x3c\x54\x89\x6e\xae\x67\xe5\x9d\xec\x48\x89\xb3\x39\xda\x3f\xeb\x86\xf6\x1f\x95\x72\xc4\xb5\x51\x61\x8b\x52\x69\x92\x35\xe3\xc2\xad\x4b\x6f\xdb\xf3\x36\x81\x2f\xa6\x62\x92\xa0\x32\x10\x28\x72\x92\x69\x7b\x9b\x2b\x06\xef\x2a\x4a\xf6\x17\xef\x8e\x54\x1f\x05\x53\x6b\xf5\x23\x02\x32\xd4\x4c\x8f\xc3\xff\x35\x27\x9f\x93\x8b\x11\x86\xc3\x1b\x7d\xb8\x5f\xea\xab\xbc\x65\x23\xc4\x30\xb5\xd6\xef\xbc\x1c\x9a\xf5\xdd\x3c\xed\xce\x9b\xe1\x1a\xc1\x25\x70\x6b\x3d\x81\xcf\xb1\x1e\x40\x28\x0b\x65\xa0\xa8\xd8\x43\x8e\x0b\xea\x68\xa5\x9a\xd8\xcd\xe3\x07\x94\xf1\x76\x63\xb4\xb6\xb9\x1f\x7f\x03\x20\x95\x8a\xe7\x5f\x53\x00\xe7\x92\x16\xe7\x2c\xb1\xa7\x06\xae\x14\xcf\x41\x52\xe8\xfd\x90\xca\x3a\x87\x01\x5a\x1b\x6c\xe9\x6c\xa6\x34\x75\xcb\xa3\xfd\xbe\x97\xb5\xba\x23\x5a\x77\x7d\x77\x78\xbc\x6b\x52\x1d\xee\x9a\xd4\x86\xd7\xcf\xf3\xa3\xe8\x43\x7f\x7d\xf7\xf3\xf5\xe4\xc3\xc3\xf5\xd5\x18\xee\x4b\x12\x2a\x5b\x03\x1a\xf8\x7c\x7d\x03\xaa\xc0\x19\x81\x8a\x5b\x21\xd4\x34\x32\x4c\x91\x29\x8e\x81\xad\xf8\xe2\xc9\xd2\xe0\xc6\x42\x9d\xc1\xa2\x58\xa2\xa3\xd4\xe1\xf2\x0c\x56\x64\x4e\xc1\x3a\xd0\x14\x72\x37\xd5\x68\xe6\x9d\x7e\x0b\x2e\xfa\xd9\x0b\xb4\xee\x97\x14\xdd\x8c\x7b\x47\xd2\x07\x29\x55\x3d\xd2\xba\xd6\x72\xb3\xaa\x20\x53\xf7\x53\xe9\xec\x42\x49\x02\xf4\x5d\xfd\xf5\x2c\xcf\x47\x17\xc6\x36\x59\xbf\xfd\xbe\x8b\x88\x4c\xf8\x9b\x3a\x0a\x8d\xa7\xcc\xec\xc9\xde\xd9\xc1\x7a\x1d\x35\xa1\xe2\x40\x67\x78\x6d\x1b\xd4\x6b\xaf\x04\x43\x67\x2c\x52\x5c\xb2\x77\x84\x05\xc3\xc9\x04\xb5\x12\xf6\xf4\xf1\xb9\x58\xf7\x61\x1f\x2e\x9c\xcd\x1c\xcd\x62\x2e\x7a\x09\x6b\x40\x04\xde\xb7\x76\xd6\x87\x8d\x16\x7c\xc2\x35\x39\x38\x91\x5b\x63\x29\x4c\x90\x9e\x7b\xa6\x77\x44\x04\xd9\xbd\x89\xab\x38\x42\x63\xd2\x59\x1a\xee\x08\x92\x69\x58\x7d\x9a\x7c\x2f\xc4\xab\x5a\xbe\xde\x2a\xa4\x33\xa8\x75\xa0\xd1\x69\xeb\xad\xde\x2d\x8d\xf3\x03\xe0\xfa\x18\xf2\x9a\xd3\x50\x08\xec\x1d\x96\x4f\x71\xf4\xf0\xe9\x1e\xfe\xd5\x0a\xc6\x6a\xfd\xb1\x46\xd0\x53\x42\xad\xb7\x63\x98\x90\xf3\x2a\x8b\x97\x32\xef\xb4\x2c\x39\xcf\xe9\x02\xb5\x92\xca\xaf\xd3\x92\x9c\xb2\x32\xcd\x6d\xe5\xfa\x2b\xfb\x97\x46\x32\xbc\x23\xda\x29\x21\xb6\x6c\x83\x32\x50\x6b\x1f\x3a\x06\xf7\x33\xf3\xfe\xdd\xdb\xd1\x5e\x77\xed\x1c\x20\x29\xad\xbc\xc3\x34\xd3\x78\xa0\xd9\xae\xc3\xef\x10\x7f\x87\x32\xcc\xd5\x38\x12\x42\x8a\x86\x5b\x29\x1a\x76\x06\xff\x79\xab\xc5\x35\x97\x86\x33\xd1\x3b\xcc\x32\x25\x9e\xca\x97\x32\xc3\xf6\x3f\x24\xcb\x70\xc3\xd6\x1a\xd0\x58\x51\xd6\x1c\xca\xdb\x33\xba\x4b\xcd\x8c\x75\x94\xae\xde\x8c\xbe\x4d\x85\x49\x45\x4e\x62\xde\x8b\xe5\x63\x14\x84\xc9\x2d\x44\x99\x98\xa6\xa0\xb5\x93\xbb\x7f\x00\x44\x58\x63\xbc\x43\x31\x4f\x0b\x5c\x85\x2a\x4a\xc3\x75\xd5\x0b\x65\x38\xec\x84\x87\x05\xae\x86\x25\xb9\x61\x10\x86\x05\xea\x8a\xba\x0b\x74\x58\x3a\xbb\x5a\x27\x70\x83\x2b\x55\x54\x45\x53\x3d\xa1\xec\x6e\x3f\x3c\x84\xb7\xa2\xa9\x9f\x0d\xcd\x24\x40\x31\x87\x92\x1c\x4c\xee\xbe\xc4\xc3\x0e\x4e\x46\xf1\xc9\x1d\x07\x7b\x28\x52\xad\x0a\xe5\x01\x79\xa8\xea\xc7\x64\x4d\x5d\x5d\xbf\x1b\x3c\xca\x6c\x39\x8f\x35\x75\xfa\xd4\xb3\xe6\xbf\x01\x00\x00\xff\xff\x97\xca\x31\x53\xb3\x16\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xb4\x58\x5b\x4f\x23\xc7\x12\x7e\xf7\xaf\x28\xc1\xc3\x82\x04\x83\x61\xb3\xbb\xc4\x4a\x1e\xf6\x18\x8e\xb2\xca\xc2\x92\xc0\x26\x47\x8a\xa2\x51\xb9\xbb\xc6\xd3\x72\x4f\xf7\xa4\xab\xc7\xc6\x8a\xf2\xdf\x8f\xba\xe7\xe2\xdb\x98\x03\x39\x84\x17\x6b\x66\xba\xaa\xbe\xfa\xea\xda\xcc\xd1\x29\x9c\x68\x82\x03\xa1\x2b\xf6\xe4\x52\x83\x05\x1d\xc0\x9f\x03\x00\xbf\x2c\x09\x9a\xbf\xef\x81\xbd\x53\x66\x3a\x00\x90\xc4\xc2\xa9\xd2\x2b\x6b\xe0\x7b\x38\xf8\x6a\xd4\x1f\x15\x41\x23\x0e\x51\x7c\xf0\xd7\x60\x70\x08\x13\x74\x74\x5a\x90\x47\x3d\x18\xac\xec\x14\xe8\x45\x3e\xb1\x8f\x69\xee\x7d\x99\x92\x91\xa5\x55\xc6\xbf\xc4\xe2\x4d\xa3\x01\x7e\x78\x78\xb8\x03\x47\x28\x4f\xad\xd1\x4b\x68\x75\xc1\x11\x25\xd3\x04\x82\xfe\xd1\xd9\x59\x6b\x2f\xa1\x47\x2c\x4a\x4d\x89\xb0\xc5\xe8\x72\x78\x39\x3c\x8e\x30\x57\xc0\x2c\xa7\x22\x47\x63\x48\xbf\x04\xcc\xb8\x16\x81\xcc\x3a\x40\x18\x5b\x47\x5f\xee\x61\x6c\x8d\x47\x65\xc8\xc1\x67\x65\xaa\x47\x90\xe4\xd4\x1c\xbd\x9a\x13\x1c\x09\xeb\xc8\xf2\x29\xfb\x60\xf5\x04\x9a\xc7\x09\x79\xec\x1e\x50\x97\x39\x9e\x40\xa6\xd1\x0b\x74\xdd\xd1\xf6\xb9\x3e\xdb\x3e\xc5\xc3\x3d\xbe\xcc\xc9\xb1\xb2\xe6\x25\xbe\xfc\x52\x8b\x3c\xdb\x17\x6f\xe1\xee\x3f\xd7\x80\x46\x82\x32\xec\x51\xeb\x7f\xd4\xbd\x43\x28\x50\xe4\xca\x10\x0f\x0e\xe1\x81\x9c\xc3\xcc\xba\xe2\x0d\x83\x70\x95\x24\x38\x88\x4e\xf2\x92\x3d\x15\x07\x20\x2d\x31\x18\xeb\xa1\x74\xb6\x24\xa7\x97\xc0\x55\x59\x5a\xe7\x41\x2b\xf6\x0c\x36\x83\x02\x4b\x06\xb6\xb0\x20\x90\x16\x7c\xae\x38\x59\xe7\x50\x58\xe3\x9d\xd5\xba\xa9\x09\xee\x63\x32\xe8\x3a\xaa\xe9\x3c\xde\xe5\xf3\x8b\x93\xe4\x48\xc6\x53\xc1\xe0\x4a\x63\x2c\x13\x6e\x12\xf5\x37\x63\x25\x9d\xff\xbe\x1d\xc3\x35\xfb\x05\x8a\xd7\x35\xaf\x24\x19\xaf\xb2\xa5\x32\x53\xb8\xf9\x38\x06\x94\xd2\x11\xf3\x0a\xd2\xbb\x8b\xd1\xbb\x6f\x46\xc3\xe1\x08\xcf\x47\xdf\x8a\x11\xd2\x53\xf0\xa4\x2d\x50\x99\xd7\x45\xf8\xef\x9f\xae\x6e\x37\x09\x5a\x2f\xe0\x1d\x34\x0b\xeb\x66\xaf\x17\xa8\x5a\xdb\x6e\x90\x2e\x4e\x20\xfc\xbc\xdd\x67\xfe\x75\xe2\xd4\x58\x7f\x7e\x8c\x26\x17\xa3\x8b\x6c\x74\xf9\xfe\x04\xba\x57\xe2\xed\xe8\xfd\xf9\xe8\xc3\x87\x7d\x48\x5f\x2d\x64\x0d\xd8\x9d\x70\x5d\xac\x87\xab\xa1\xed\xc9\x08\x0a\x2d\x52\x36\xaa\x2c\xc9\xf7\xc2\x2a\xb0\xdc\x8f\xea\x06\x4b\xc8\x9c\x2d\xda\x0e\xd1\x84\xce\xdb\x55\xb5\x6f\xf7\xb1\xb1\x35\x99\x9a\x42\x67\x32\x2a\xcd\xb0\xd2\xbe\x31\xf8\xe7\x5f\x9b\x00\x35\x4e\x48\xff\x3d\x68\x36\x83\x5a\x3a\xb6\xd6\x36\xbb\xac\x24\x4e\xf6\xd9\x3d\x0c\xc5\x90\xa9\x69\xe5\x30\x68\x5a\x07\x32\xbb\xe4\x26\x7e\x6b\xc3\x7a\x7b\x2c\xad\x2a\xe9\xea\xf6\x3e\xd2\x01\x8b\x5c\x89\x1c\x1c\xb1\xd5\xf3\x9a\x1c\xdc\xe8\x09\xa1\x85\x1b\x41\x09\xfc\x1a\x01\x72\x6c\xec\xb3\x6a\x42\x35\x92\x37\x0c\x0b\xa5\x35\x08\x5b\x14\x95\x51\x02\x3d\xc1\x42\xf9\x3c\x76\xce\xed\xe1\xdb\xac\x03\xeb\x11\x3f\x3e\xd8\x37\x88\x36\x68\x66\xce\xd3\x19\x2d\xff\x46\x6a\xde\xdf\xff\x00\x65\x35\xd1\x4a\x40\x50\x10\xb9\xae\x98\x1c\xbc\x09\x83\xe7\xcd\x56\xbe\x21\x33\xf9\x54\x2a\xd7\xcb\xdf\x1d\x06\xc7\x02\x43\x52\x39\x12\xde\xba\x25\x2c\x72\x72\x04\x53\x32\xe4\xd0\x93\x84\xa8\x81\x81\x73\x5b\x69\x09\x13\x82\x52\xa3\x20\x19\x66\x60\x4c\x35\x06\x26\xe1\xc8\xf3\x33\x3d\x37\xe4\x43\x6a\xa4\x85\xaf\xfa\x31\xe5\x4b\x56\x02\x35\xdc\xd6\x07\xe1\xe6\xe1\x6b\xb2\xab\xda\x54\xc5\x84\x5c\xbf\x6a\x55\xa6\x58\x79\x2b\xc9\x93\x08\x6a\xd3\x82\x7c\x6e\x65\xaf\xb9\x9b\xf8\x29\x92\xd0\x89\x80\xcf\x09\x72\xcb\x1e\x3e\xdd\xcd\xbf\x69\x5b\xd2\x5e\xf7\xb6\x53\xfb\x20\x53\x8e\xfd\x69\x66\x2b\x23\xb7\xc2\x51\x5a\x99\x0a\x25\xfb\xa3\x31\xfe\x74\xf5\x73\x6d\xd1\xa1\x99\xc6\xc5\x03\x99\xd5\xd4\xc0\x8f\xd5\x84\x9c\x21\x4f\x0c\xa5\x95\x2f\x40\x72\x3e\x4c\x2e\x92\x61\x32\x3c\x3b\x7f\xbf\x85\x84\xc9\xcd\x95\xa0\xbd\x68\xbe\xfb\xee\xfa\xcb\xd5\xe0\x59\x90\x1a\x55\x9c\x0c\x1e\x72\x82\xf3\x48\x5b\x5d\x44\x13\x0a\x85\x48\x6e\x4e\x32\xe6\x69\x28\xb3\x14\x4b\x15\x5f\xb9\x93\xc8\xf3\xf9\xd0\xe7\x7b\x05\x42\x4a\x4b\xc3\xc9\x20\x80\x19\xac\xb9\xdd\xe3\x72\xed\xee\xdb\x75\x77\x0f\xc1\x46\x7f\x36\x77\xf3\xf6\x0e\xd0\x74\x17\xae\xb2\x4c\x3d\xf6\x46\xe4\xa7\x8a\x9c\xa2\xba\xc6\x9a\x59\xd2\x36\x03\x82\x5a\xae\xc3\x8d\x86\x17\x71\x66\x4c\x96\x1d\x6c\xb8\x6a\xb0\x29\xee\x7a\x85\xb6\x21\xb9\xeb\xfe\x91\x59\x9b\x34\xf0\x13\x9e\x8b\x64\xe3\xcc\x31\x3c\x3f\xce\x1b\x82\x5b\x91\x96\x76\x61\xb4\x45\x99\x96\xce\x7a\x2b\xec\xff\x5a\xfc\x37\x14\x87\xeb\x45\x33\x35\x36\xab\xb4\xd1\x05\x2a\xec\xc6\x4d\x73\xa8\x38\x66\x48\x6b\x30\xb2\x34\x0b\x59\xa2\x9b\xed\x59\x79\x27\x3b\x52\x62\x6f\x8e\xfa\x4f\xba\xa6\xfd\x47\xa5\x1c\x71\xad\x54\xd8\xa2\x54\x9a\x64\xcd\xb8\x70\xcb\xd2\xdb\x76\xbd\x4d\xe0\xab\xa9\x98\x24\xa8\x0c\x04\x8a\x9c\x64\xda\xee\xe6\x8a\xc1\xbb\x8a\x92\xed\xc1\xbb\x71\xaa\x8f\x82\x89\xb5\x7a\x87\x80\x0c\x35\xd3\xae\xfb\xbf\xe6\xe4\x73\x72\xd1\xc3\xb0\x78\xa3\x0f\xfb\x4b\xbd\x95\xb7\x6c\x04\x1f\x26\xd6\xfa\x8d\x9b\x43\x33\xbe\x9b\xab\xdd\x59\xd3\x5c\x23\xb8\x04\x6e\xad\x27\xf0\x39\xd6\x0d\x08\x65\xa1\x0c\x14\x15\x7b\xc8\x71\x4e\x1d\xad\x54\x13\xbb\xba\xfc\x80\x32\xde\xae\x94\xd6\x3a\xb7\xfd\x6f\x00\xa4\x52\xf1\xec\x25\x09\x70\x26\x69\x7e\xc6\x12\x7b\x72\xe0\x4a\xf1\x0c\x24\x85\xda\x0f\xa1\xac\x63\x18\xa0\xb5\xce\x96\xce\x66\x4a\x53\x37\x3c\xda\xf7\xbd\xac\xd5\x15\xd1\x9a\xeb\xdb\xc3\xe3\x5e\x93\xea\xb0\xd7\xa4\x36\xdc\x7e\x9e\xef\x45\x1f\xfa\xeb\xbb\x9f\xaf\xc7\x1f\x1f\xae\xaf\x46\x70\x5f\x92\x50\xd9\x12\xd0\xc0\x97\xeb\x1b\x50\x05\x4e\x09\x54\x9c\x0a\x21\xa7\x91\x61\x82\x4c\xb1\x0d\xac\xf9\x17\x57\x96\x06\x37\x16\xea\x04\xe6\xc5\x02\x1d\xa5\x0e\x17\x27\xf0\x48\xe6\x18\xac\x03\x4d\x21\x76\x13\x8d\x66\xd6\xc9\xb7\xe0\xa2\x9d\x2d\x47\xeb\x7a\x49\xd1\x4d\xb9\xb7\x25\x7d\x94\x52\xd5\x2d\xad\x2b\x2d\x37\xad\x0a\x32\x75\x3d\x95\xce\xce\x95\x24\x40\xdf\xe5\x5f\xcf\xf0\xdc\xd9\x30\xd6\xc9\xfa\xed\xf7\x4d\x44\x64\xc2\x6f\xea\x28\x14\x9e\x32\xd3\x27\x6b\x67\x03\xeb\x75\x94\x84\x8a\x03\x9d\xe1\xb6\x6d\x50\x2f\xbd\x12\x0c\x9d\xb2\x48\x71\xc9\xde\x11\x16\x0c\x47\x63\xd4\x4a\xd8\xe3\xdd\x75\xb1\xae\xc3\x3e\x5c\x38\x9d\x3a\x9a\xc6\x58\xf4\x12\xd6\x80\x08\xbc\xaf\xcd\xac\x8f\x2b\x29\xf8\x8c\x4b\x72\x70\x24\xd7\xda\x52\xe8\x20\x3d\xfb\x4c\x6f\x8b\x08\x67\xb7\x3a\xae\xe2\x08\x8d\x49\x67\x69\xd8\x23\x48\xa6\x61\xf4\x69\xf2\xbd\x10\xaf\xea\xf3\xf5\x54\x21\x9d\x41\x2d\x03\x8d\x4c\x9b\x6f\xf5\x6c\x69\x8c\xef\x01\xd7\xc7\x90\xd7\x9c\x86\x44\x60\xef\xb0\x7c\x8a\xa3\x87\xcf\xf7\xf0\xaf\xf6\x60\xcc\xd6\x1f\x6b\x04\x3d\x29\xd4\x5a\x3b\x84\x31\x39\xaf\xb2\xb8\x29\xf3\x46\xc9\x92\xf3\x9c\xce\x51\x2b\xa9\xfc\x32\x2d\xc9\x29\x2b\xd3\xdc\x56\xae\x3f\xb3\x7f\x69\x4e\x86\x7b\x44\xdb\x25\xc4\x9a\x6e\x50\x06\x6a\xe9\x7d\xcb\xe0\x76\x64\x2e\x3f\xbc\x1f\x6e\x55\xd7\xc6\x02\x92\xd2\xa3\x77\x98\x66\x1a\xf7\x14\xdb\x75\xf8\x0e\xf1\x3b\x94\xa1\xaf\xc6\x96\x10\x42\x74\xba\x16\xa2\xd3\x4e\xe1\xff\x5f\x6a\x71\xcc\xa5\x61\x4d\xf4\x0e\xb3\x4c\x89\xa7\xe2\xa5\xcc\x69\xfb\x0f\xc9\x32\xec\xb0\xb5\x04\x34\x5a\x94\x35\xfb\xe2\xf6\x8c\xea\x52\x53\x63\x1d\xa5\x8f\xef\x86\xdf\xa6\xc2\xa4\x22\x27\x31\xeb\xc5\xf2\x29\x1e\x84\xf1\x2d\xc4\x33\x31\x4c\x41\x6a\x23\x76\x2f\x05\xf2\xdf\x00\x00\x00\xff\xff\x96\x1c\x96\x21\xb1\x15\x00\x00"),
 		},
 		"/terraform-modules/bare-metal/flatcar-linux/kubernetes/versions.tf": &vfsgen۰CompressedFileInfo{
 			name:             "versions.tf",
@@ -5835,9 +5835,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/terraform-modules/bootkube/assets.tf": &vfsgen۰CompressedFileInfo{
 			name:             "assets.tf",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 8315,
+			uncompressedSize: 8272,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xc4\x59\x5d\x6f\xdb\xb8\x12\x7d\xf7\xaf\x18\x28\x2d\x62\x5f\xf8\x23\xed\xed\xbd\x8b\x06\x08\x8a\x7d\x5a\x14\xdb\x87\xa2\xe8\x3e\x05\x01\x41\x53\x63\x9b\x1b\x99\xd4\x92\x54\x9a\x20\xc8\x7f\x5f\x90\xd4\xb7\x28\x4b\xb6\x9b\xdd\xbc\xb4\x16\x67\x0e\x87\x33\x47\x67\x86\xb6\x42\x2d\x33\xc5\x10\xa2\x44\x32\x9a\x90\x0d\x4f\x30\x82\x68\x2d\xa5\xd1\x46\xd1\x74\x41\x53\xae\x51\x3d\xa0\x8a\xe0\x79\x02\x60\xd7\x05\xdd\x23\xdc\x40\xf4\xe6\xf9\x81\xaa\x25\xd5\x1a\x0d\x89\xb9\x7a\x59\x55\x5e\x7b\x2a\xf8\x06\xb5\xd1\xab\x00\xd2\xf2\x89\xee\x93\x68\x02\xc0\xa4\x30\x28\x0c\xdc\x80\xc1\x7d\x9a\x50\x83\x16\x7e\x1a\xbd\x79\x4e\xa9\xd9\x2d\xf7\x32\xce\x12\x7c\x59\x15\x31\xea\xe3\x36\x98\xbb\x80\x01\xee\xb3\x35\x92\x72\x8d\xf0\x3d\xdd\xda\xf0\x6d\xec\x36\x00\xca\x45\xf1\x54\xdf\x46\x4d\xe3\xe8\xce\x21\xb0\x44\x66\x31\x49\x95\x7c\xe0\x31\x2a\xf0\x7f\x39\x42\x63\xc9\x59\xa3\x61\x31\xf1\xfe\x1a\xa0\xb4\xfe\x53\x72\x31\x8d\xe6\xd1\x1c\x36\x52\xed\xa9\x49\xb8\x36\xd3\x68\x67\x4c\xaa\xaf\x57\xab\xb7\xfa\xfa\xfd\x7f\x7f\xf9\x18\xcd\x1d\x6a\x1d\x62\x36\x73\xa8\xf6\x13\x67\x48\x18\x8f\x55\x0d\xd5\x5a\xd7\x97\x9c\xad\x51\x99\x36\x18\x13\x86\xca\x68\x5b\x9a\xca\xb6\xb3\xe4\x43\x16\x74\x9d\x20\x31\x89\x26\x65\x3a\x73\x87\xd0\xd2\x04\xe0\x65\x36\x79\x99\x4c\x06\xd9\x63\x13\xac\x64\x92\xa0\xb2\x15\xa3\xdb\x9f\x40\xa3\x2e\xe4\x6b\xf1\xa9\x6f\xa7\x06\xb1\x2a\x23\x92\x1b\x8d\x61\x58\xd7\x2b\xa7\x5a\x2a\xe3\x66\x89\x1b\x7f\x1e\xb3\xb0\xe9\xe7\xc5\x10\x41\x82\x84\x6e\x39\x05\x98\x1d\xe4\x55\xcb\x2d\x44\xb0\x91\x64\xd1\x6c\x87\xb6\x42\xe7\x73\xa4\x44\x7a\x2d\x6a\xb4\x36\x68\x30\xa2\x5c\x1b\x43\x84\xea\xcc\x77\x43\x89\xb2\xf6\x47\xc9\x31\xdb\x51\x65\xf4\xca\xf9\xe9\x27\x6d\x70\xbf\x6a\x62\x9c\x9e\x9d\x3a\xf4\x31\xb2\x5b\xb1\x6b\x9c\xf2\x06\xb5\xf4\x67\xc8\x69\xdf\x1b\xd0\xcb\xfd\xbe\xf7\xec\x18\x09\x1e\x50\x61\x46\xdd\x83\xc0\x4b\xbc\xa6\x1a\xff\xff\x01\x05\x93\x31\x4e\xad\x14\x6b\x4c\x36\x44\xf3\xad\xc8\x41\x96\xae\x12\x8c\x2e\xed\x07\x92\xe2\xde\x9f\xb2\x4a\xff\x3d\x3e\x1d\x46\x4c\x15\x7f\xa0\x06\xad\xe1\xb2\xaa\x68\xed\x69\x08\xb5\x19\x6e\x00\xd5\x11\x38\x79\x6a\x84\x5a\xa1\x37\x83\xcd\x73\x48\x19\x93\x99\x30\x24\xcd\xd6\xa3\x82\xcd\xdd\x16\xb9\xdf\x32\xcd\xd6\x09\x67\xcd\x88\x1d\x01\x02\xe9\x1d\x93\x59\xeb\xdb\xcd\xac\x47\x4c\x38\x0a\xd3\x40\x1d\x99\x03\xef\x79\x00\xb3\x5e\xaf\x81\x04\xe4\x58\xc1\x52\xe5\xdd\x9b\x6e\xb7\x0a\xb7\xd4\x70\x29\xea\x34\xec\xae\xfa\xfa\x56\x9f\x1b\x49\xeb\x73\x82\x9b\x1b\xcb\x77\x84\x4f\xcd\x40\xfd\x2b\x0a\xd1\x1c\x82\x89\xad\x21\xd8\xfc\xfe\xa7\xca\xc6\x0c\xae\x21\x8a\xba\xb1\xd4\xd2\x7d\x5e\x2c\x41\x5a\xd6\xc3\xf1\x29\x1d\x1d\x92\xab\xd6\x79\x21\x35\xde\xbf\x50\x28\xed\xfa\xd6\x22\x52\x98\x26\x9c\x51\xdd\x15\x8e\x04\xc5\xd6\xec\xa6\x1d\x11\xf4\xe4\x78\x34\x8a\x92\x4d\x42\xb7\x1a\xba\x92\xd6\xd2\xef\x9a\x71\xff\xc8\xd8\x26\x49\x7b\x6a\x04\xe0\x5b\x21\x15\x92\xc7\xff\x5d\x7d\x24\x4c\x10\xb6\x43\x76\x5f\xb9\x85\x56\x87\xda\x62\x2a\xe3\x85\x33\x4c\x25\x17\xe6\xd4\xc6\xd8\x46\x39\xbb\x35\x86\x01\x8b\xe6\xe8\x46\xb8\xda\xea\xc0\xa8\xd0\x36\xaf\x0d\x0b\x17\xf0\x55\xa6\x99\x8d\xcb\x75\x5c\x25\xd0\xa0\x06\x17\x04\x3c\xd0\x24\x43\xed\x72\x01\x36\x19\x71\xcd\xc4\xc5\xb3\x3c\x34\x6b\x78\xbb\xd3\xe7\x8c\xda\x3e\xe7\xce\x18\x75\xa8\xd7\x9c\xbe\x83\xf3\x5b\x7b\x36\x18\x33\xc8\xe5\x50\xa9\x92\x8f\x4f\x6d\x98\x41\x28\xe7\x55\x5c\x3d\xa5\xc2\x58\xe8\x10\xc6\x01\x98\xdc\xab\xc4\x70\xc7\x25\x69\x42\x05\x92\xb6\x58\xdc\xc0\x9e\x3e\x4e\xdf\xcf\x7b\xb5\xe2\xf0\xc0\xd4\x08\xa4\x3b\x36\xfd\x53\xf7\x19\x3b\x4f\x29\x12\xcb\x3d\xe5\x82\xe8\x6c\xb3\xe1\x8f\x9d\xe0\x02\x36\x4d\x6f\xa1\x49\x01\xcd\xd3\xca\xdb\x6e\xb3\x93\xda\x4c\xdb\x7b\xcf\xe1\xdd\xd5\xec\xac\x9b\x51\xff\xd0\x57\x78\x9e\x3a\xfa\x31\xda\x9a\xf9\x86\x70\xeb\x0d\xa8\x80\x0c\xce\x14\x9e\x17\xfd\xc8\x7e\x1e\x6f\xcc\xe2\x6f\x75\x3e\x89\xd3\x94\x17\xbc\xba\xbd\xba\xcb\xa7\xf3\x47\x83\x4a\xd0\xa4\xd6\x6c\x52\xa9\x4c\x70\x28\x6c\x1d\xe9\xd8\xd1\x30\x38\x22\x59\xae\xa3\x88\x9d\xb4\x06\x5a\x68\xf9\x3e\x94\x36\x07\xfb\x5f\xc3\xad\xaf\x0b\x32\x29\x84\x51\x94\xdd\x93\x3d\x7d\x24\xa9\x9d\xa4\xa5\xc2\x16\x5f\x83\x36\xa5\xee\x3b\xb9\xd6\x4e\x0b\x4b\x6c\xa2\x91\x29\x34\xfa\x68\x8d\xad\x5d\x6c\x3d\x42\x53\x6a\xab\x0d\x8c\xbc\x47\x61\xf1\x6f\x27\x3e\xd6\x8d\x54\xe0\x1e\x02\x17\x2e\xec\x8e\xed\x75\x6e\xf9\x3c\x29\xce\xe7\x16\x08\x8f\xf3\xc3\xba\x8f\xcb\xe2\x61\xcb\xca\xc7\xd3\xb2\xf2\x0f\x73\xcb\x17\xf7\x6f\xb0\x21\x76\x8e\xd5\xdb\x17\xc3\x09\xe8\x6d\x8f\x1d\x73\xdf\x25\x1d\xcb\x0e\xd4\xbe\x36\x09\xbe\x83\x6b\xb8\x9a\x9c\xd0\x59\x7b\x4a\x55\x6b\xb0\x76\xec\xb3\xc1\x2e\x3b\xbc\x68\xf1\xc6\xc2\x26\x58\x04\x1c\x73\xed\x22\x76\xfa\x62\xe5\x0e\x63\x52\x5a\xdc\xc0\x86\x26\xba\x0a\x1c\xe0\x02\xbe\xa1\xb0\x9d\x20\xb7\x71\x61\x38\x3a\x14\x4e\x2e\xf8\x6a\x1b\x72\xce\x00\x50\x6c\xd0\xe8\xfe\x16\xf4\x88\x16\x5d\x9a\x97\xdf\xea\x06\x65\x7f\x94\xde\xf7\x34\x9c\xa1\x4e\xd3\x23\x1a\x43\xdf\xb4\xe6\x49\x64\x52\x6c\xf8\x96\x9c\x9c\xcf\x0a\x63\x91\x63\x94\xe9\x6c\x74\xa1\xd3\x9b\x4e\x19\x9a\xbf\xa2\x8d\xba\x0a\x17\xe5\x0d\x23\xe5\x37\xab\xc1\x6e\x65\x11\x86\xbb\xd5\x4f\x6d\x4e\x9d\xc2\xd0\x78\xcf\xc5\x59\x65\x71\x08\x65\x51\x9c\x2c\xb4\x98\x9d\x53\xcb\x2e\xfd\xdb\x85\x73\xc1\x9e\x51\x36\xef\x7f\x4e\xd1\xbc\xcc\xd5\xca\x46\x8a\x72\x8d\xac\x5f\xf7\xfe\x54\x0a\x57\xcf\xe5\xa9\x10\xa2\x83\x37\x27\xfb\x66\x35\x1a\x82\x0f\x34\x5f\x9a\x34\xb5\xda\x7f\x0d\x10\xcd\xe1\xd6\x8a\x27\xb7\x7d\x54\x51\xb1\xc5\xe9\xd5\x1c\xde\xd9\x4b\x7e\xc3\xb9\xa0\xd7\xdd\xec\xc4\x5b\x59\xa9\xa4\xfe\xf0\xbf\xa1\x40\x45\x4d\x7e\x3a\x4f\x43\xa7\xe2\xbf\x7b\x5b\x7d\xe8\x9c\x2d\x31\xc9\x8f\xdc\xea\x42\xfd\xca\x35\x74\x02\x9a\x99\x5d\x48\xb4\xda\x91\x3b\x22\xd5\xe3\x9f\x5a\xfd\xb4\x9f\x41\xe1\x5f\x19\x57\xa8\x81\x1b\x58\x23\x50\x03\x2d\xd0\xd9\xe4\x02\x0a\x5a\x6d\xb9\xd9\x65\xeb\x25\x93\xf5\xfb\xeb\x82\x0b\x96\xad\xa9\x91\x6a\x55\xa0\xae\xd6\x89\x5c\xaf\xf6\xd4\xbe\x89\xab\xf4\x7e\x5b\x5b\xc8\xff\xb3\xdc\xca\x8b\x2f\x1f\xde\x8f\xc8\x9d\x7f\xe3\x07\x33\xd7\x90\x96\x23\xf3\x36\x9c\x2f\x2e\x80\xd6\x89\x4e\x37\x06\x15\x98\x1d\x16\x7d\x6e\xec\x41\x16\xce\xff\x35\x8e\xe3\x9f\xd6\xe5\xef\x65\xd1\x38\xde\xe7\x4d\x5b\xc3\x4b\x31\x00\xae\xc5\xa5\x01\x8d\x66\x0e\x99\xc6\xb6\xdd\x72\x72\x01\xdf\x77\x5c\x03\xd7\x8e\xf9\x3a\x4b\xad\x44\x70\xb1\x05\x8d\x29\xb5\x39\x83\x5f\xbf\x7e\x2e\x44\xe9\x8f\x6f\x5f\xbc\x5d\x09\xef\xbf\xa2\xd3\x3e\x8d\x6b\xca\xee\x7f\x50\x15\x2f\x98\xdc\xa7\xd4\xf0\x75\x82\xf0\x83\x3e\xf9\x4d\xd0\xed\x2f\x37\xa0\xd3\x84\x9b\xe9\x0c\xa8\x88\xbd\x00\xcc\x60\x87\x0a\x6d\x08\x6b\x64\xd4\x5a\x7d\x47\xa5\xa8\x55\xbe\x4b\x6d\x73\x19\x73\xc3\xa5\xdd\x4d\xa6\xb6\x8c\x52\xc1\xf4\xf2\xd3\xe5\x0c\x18\x15\x42\x5a\x72\x4f\x2e\x2c\x78\x0c\x3f\xb8\xd9\x41\xc2\xb5\xd1\xcb\xfa\xb0\x17\x4c\xcc\x4d\x1e\x88\xfb\x1d\xa5\xfa\x45\xa5\x2f\x91\x33\x3b\x08\x46\x11\x7c\xea\xb7\xb5\x82\x35\x02\xc8\x4a\xef\xdf\x01\x00\x00\xff\xff\x4d\x65\x06\xe8\x7b\x20\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xc4\x59\xdf\x6f\xdb\x36\x10\x7e\xf7\x5f\x71\x50\x5a\xc4\x1e\xfc\x23\xed\xba\x0d\x0d\x60\x14\x7b\x1a\x8a\xf5\xa1\x28\xba\xa7\x20\x10\x68\xe9\x2c\x73\x91\x49\x8d\xa4\xd2\x04\x41\xfe\xf7\x81\xa4\x7e\x50\x12\x65\xc9\x76\xb2\xe5\xa5\x95\x78\xf7\xf1\x78\xf7\xe9\xbb\x63\x22\x50\xf2\x5c\x44\x08\x41\xca\x23\x92\x86\x5b\x9a\x62\x00\xc1\x86\x73\x25\x95\x20\xd9\x82\x64\x54\xa2\xb8\x47\x11\xc0\xd3\x04\x40\xaf\x33\xb2\x47\x58\x43\xf0\xe6\xe9\x9e\x88\x25\x91\x12\x55\x18\x53\xf1\xbc\xaa\xbd\xf6\x84\xd1\x2d\x4a\x25\x57\x1e\xa4\xe5\x23\xd9\xa7\xc1\x04\x20\xe2\x4c\x21\x53\xb0\x06\x85\xfb\x2c\x25\x0a\x35\xfc\x34\x78\xf3\x94\x11\xb5\x5b\xee\x79\x9c\xa7\xf8\xbc\x2a\x63\x94\xc7\x6d\x30\x37\x01\x03\xdc\xe5\x1b\x0c\xab\xb5\x90\xee\x49\xa2\xc3\xd7\xb1\xeb\x00\x08\x65\xe5\x5b\x79\x13\x34\x8d\x83\x5b\x83\x10\xa5\x3c\x8f\xc3\x4c\xf0\x7b\x1a\xa3\x00\xfb\x53\x20\x34\x96\x8c\x35\xaa\x28\x0e\xad\xbf\x04\xa8\xac\xff\xe6\x94\x4d\x83\x79\x30\x87\x2d\x17\x7b\xa2\x52\x2a\xd5\x34\xd8\x29\x95\xc9\xeb\xd5\xea\xad\xbc\x7e\xff\xf3\x6f\x1f\x83\xb9\x41\x75\x21\x66\x33\x83\xaa\x9f\x68\x84\x61\x44\x63\xe1\xa0\x6a\x6b\x77\xc9\xd8\x2a\x91\x4b\x85\x71\x18\xa1\x50\x52\x97\xa6\xb6\xed\x2c\xd9\x90\x19\xd9\xa4\x18\xaa\x54\x86\x55\x3a\x0b\x07\xdf\xd2\x04\xe0\x79\x36\x79\x9e\x4c\x06\xd9\xa3\x13\x2c\x78\x9a\xa2\xd0\x15\x23\xc9\x0b\xd0\xa8\x0b\xf9\x5a\x7c\xea\xdb\xa9\x41\xac\xda\x28\x2c\x8c\xc6\x30\xac\xeb\x55\x50\x2d\xe3\x71\xb3\xc4\x8d\x1f\x8b\x59\xda\xf4\xf3\x62\x88\x20\x5e\x42\xb7\x9c\x3c\xcc\xf6\xf2\xaa\xe5\xe6\x23\xd8\x48\xb2\xc8\x68\x87\xba\x42\xe7\x73\xa4\x42\x7a\x2d\x6a\xb4\x36\x68\x30\xa2\x5a\x1b\x43\x84\xfa\xcc\xb7\x43\x89\xd2\xf6\x47\xc9\x71\xb4\x23\x42\xc9\x95\xf1\x93\x8f\x52\xe1\x7e\xd5\xc4\x38\x3d\x3b\x2e\xf4\x31\xb2\xeb\xd0\x6b\x9c\xf4\x7a\xc5\xf4\x45\x04\xb5\xf7\x1b\xe8\xa5\x7f\xef\xa7\x76\x8c\x0c\x0f\x49\x71\x44\xcc\x0b\xdf\xa7\xbc\x21\x12\x7f\xfd\x80\x2c\xe2\x31\x4e\xb5\x20\x4b\x4c\xb7\xa1\xa4\x09\x2b\x50\x96\xa6\x1e\x11\x59\xea\x87\x30\xc3\xbd\x3d\x69\x5d\x84\x3b\x7c\x1c\x80\xcc\x04\xbd\x27\x0a\xb5\xe5\xb2\x2e\xac\xf3\xd6\x07\xdb\x0a\xd8\x03\x6b\x88\x9c\x3e\x36\x82\xad\xe1\x9b\xe1\x16\x79\x24\x51\xc4\x73\xa6\xc2\x2c\xdf\x8c\x0b\xb7\xf0\x5b\x14\x8e\xcb\x2c\xdf\xa4\x34\x6a\xc6\x6c\x78\xe0\x4b\xf1\x98\xec\x6a\xe7\x6e\x76\x2d\x64\x4a\x91\xa9\x26\xec\xc8\x34\x58\xd7\x03\xa0\x8d\xa2\x0d\xe4\xa0\x00\xf3\xd6\xab\xe8\xe4\x24\x49\x04\x26\x44\x51\xce\x1a\x74\xec\x2e\xdb\x2a\xd7\xcf\xcd\xc4\xf5\x79\xc1\x7a\xad\x99\x8f\xf0\xa9\x19\xaa\xfd\x5c\x21\x98\x83\x37\xb9\x0e\x82\xce\xf1\x4f\x75\x42\x66\x70\x0d\x41\xd0\x0d\xc6\x4d\xf9\x79\xc1\x78\xd9\xe9\xc6\x63\xb3\x3a\x3a\x26\x5b\xb1\xf3\x62\x6a\x7c\x88\xbe\x58\xda\x35\x76\x42\x12\x98\xa5\x34\x22\xd2\xa3\x21\x29\xb2\x44\xed\xa6\x1d\x4d\xb4\x0c\x79\x50\x82\x84\xdb\x94\x24\xb2\xed\xa7\x1d\x5a\x8a\xee\x58\xf7\x0f\x91\x1d\xa6\xb4\x07\x49\x00\x9a\x30\x2e\x30\x7c\xf8\xe5\xea\x63\x18\xb1\x30\xda\x61\x74\xe7\xf8\xf9\x96\x87\x5a\x65\xc6\xe3\x85\x31\xcc\x38\x65\xea\xd4\x66\xd9\x46\x39\xbb\x5d\xfa\x01\xcb\x86\x69\xc6\x3a\x67\x75\x60\x7c\x68\x9b\x3b\x03\xc4\x05\x7c\xe5\x59\xae\xe3\x32\x5d\x58\x30\x54\x28\xc1\x04\x01\xf7\x24\xcd\x51\x9a\x5c\x80\x4e\x46\xec\x98\x98\x78\x96\x87\xe6\x0f\x6b\x77\xfa\xec\xe1\xec\x73\xee\xdc\xe1\x42\xbd\xe6\x44\xee\x9d\xe9\x5a\x5f\xc6\xa8\xe1\xae\x80\xca\x04\x7f\x78\x6c\xc3\x0c\x42\x19\xaf\xf2\x3a\xca\x05\xc6\x4c\xfa\x30\x0e\xc0\x14\x5e\x15\x86\x39\x6e\x98\xa5\x84\x61\xd8\x16\x8c\x35\xec\xc9\xc3\xf4\xfd\xbc\x57\x2e\x06\x46\x28\x37\x90\xee\x1c\xf5\x5f\xdd\x71\xf4\x78\x25\xc2\x98\xef\x09\x65\xa1\xcc\xb7\x5b\xfa\xd0\x09\xce\x63\xd3\xf4\x66\x32\x2c\xa1\x69\x56\x7b\xeb\x6d\x76\x5c\xaa\x69\x7b\xef\x39\xbc\xbb\x9a\x9d\x75\x5b\x3a\x30\x03\x16\x9e\xa7\x0e\x82\x11\x69\x4f\x80\x03\xb8\x6e\x13\x2a\x21\xbd\xb3\x85\xe5\x45\x3f\xb2\x9d\xd0\x1b\xd3\xf9\x5b\x59\xcc\xe6\x24\xa3\x25\xaf\x6e\xae\x6e\x8b\x79\xfd\x41\xa1\x60\x24\x75\xda\x4d\xc6\x85\xf2\x0e\x88\xc7\x0d\xb5\x9d\x29\xd1\x3b\x2a\x69\xae\x23\x8b\x8d\xb4\x76\xda\xe8\xba\xbe\x52\x54\x36\x87\x3b\xa0\xeb\x76\xe8\xf7\x29\x46\x6f\xa5\x11\xb3\x6a\x31\x94\x18\x09\x54\xf2\x68\x91\x74\x6e\xab\x16\xa1\xa9\x95\xf5\x06\x8a\xdf\x21\xd3\xf8\x37\x13\x1b\xe9\x96\x0b\x30\x2f\x81\x32\x13\x74\xc7\xf6\xba\xb0\x7c\x9a\x94\xa7\x33\x0b\x21\x8d\x8b\xa3\x9a\xc7\x65\xf9\xb2\x65\x65\xe3\x69\x59\xd9\x97\x85\xe5\xb3\xf9\xd7\xdb\xd1\x3a\xc7\xea\x6d\x6c\xfe\x04\xf4\xf6\xb7\x8e\xb9\x6d\x73\x86\x26\x07\x8a\xe7\x8c\x73\xef\xe0\x1a\xae\x26\x27\xb4\xc6\x9e\x52\x39\x1d\x52\x8f\x6e\x3a\xd8\x65\x87\x17\x2d\xde\x68\xd8\x14\xcb\x80\x63\x2a\x4d\xc4\x46\x20\xb4\x5e\x61\x1c\x56\x16\x6b\xd8\x92\x54\xd6\x81\x03\x5c\xc0\x37\x64\x5a\xca\x0b\x1b\x13\x86\xa1\x43\xe9\x64\x82\xaf\xb7\x09\xcf\xe9\xe0\xe5\x06\x8d\xf6\xad\x41\x8f\xe8\xb1\x95\x79\xf5\xab\x5a\xaf\x6e\x8f\x12\xec\x9e\x8e\x31\xd4\x2a\x7a\xbe\xfa\xa1\xcf\xbd\x48\x62\xc4\xd9\x96\x26\xe1\xc9\xf9\xac\x31\x16\x05\x46\x95\xce\xd6\x75\xed\xd4\xae\x51\x85\xa6\xb1\x46\x5e\x6a\xcb\xf2\xfa\x91\x8c\x62\x8f\x68\x37\x1a\x61\xb8\xdd\xbc\x68\x77\xe9\x14\x86\xc4\x7b\xca\xce\x2a\x8b\x41\xa8\x8a\x62\x64\xa1\xc5\xec\x82\x5a\x7a\xe9\xff\x2e\x9c\x09\xf6\x8c\xb2\x59\xff\x73\x8a\x66\x65\xce\x29\x5b\x58\x96\x6b\x64\xfd\xba\x17\xa0\x4a\xb8\x7a\x6e\x3f\xa5\x10\x1d\xbc\xfa\xe8\x2f\xab\xd1\x10\x6c\xa0\xc5\xd2\xa4\xa9\xd5\xf6\x2e\x1f\xcc\xe1\x46\x8b\x27\xd5\x7d\x54\x10\x96\xe0\xf4\x6a\x0e\xef\xf4\x4d\xbd\xe1\x5c\xd2\xeb\x76\x76\xe2\xb5\xaa\x52\x52\x7b\xf8\x3f\x90\xa1\x20\xaa\x38\x9d\xa5\xa1\x51\xf1\x3f\xad\xad\x3c\x74\xce\x96\x98\x14\x47\x6e\x75\xa1\x7e\xe5\x1a\x3a\x01\xc9\xd5\xce\x27\x5a\xed\xc8\x0d\x91\xdc\xf8\xa7\x5a\x3f\xf5\x33\x08\xfc\x27\xa7\x02\x25\x50\x05\x1b\x04\xa2\xa0\x05\x3a\x9b\x5c\x40\x49\xab\x84\xaa\x5d\xbe\x59\x46\xdc\xbd\x80\x2e\x28\x8b\xf2\x0d\x51\x5c\xac\x4a\xd4\xd5\x26\xe5\x9b\xd5\x9e\xe8\x2f\x71\x95\xdd\x25\xce\x42\xf1\x9f\x65\xc2\x2f\xbe\x7c\x78\x3f\x22\x77\xf6\x8b\x1f\xcc\x5c\x43\x5a\x8e\xcc\xdb\x70\xbe\x28\x03\xe2\x12\x9d\x6c\x15\x0a\x50\x3b\x2c\xfb\xdc\xd8\x83\x2c\x8c\xff\x6b\x1c\xc7\xbe\x75\xe5\xef\x79\xd1\x38\xde\xe7\x6d\x5b\xc3\x2b\x31\x00\x2a\xd9\xa5\x02\x89\x6a\x0e\xb9\xc4\xb6\xdd\x72\x72\x01\xdf\x77\x54\x02\x95\x86\xf9\x32\xcf\xb4\x44\x50\x96\x80\xc4\x8c\xe8\x9c\xc1\xef\x5f\x3f\x97\xa2\xf4\xd7\xb7\x2f\xd6\xae\x82\xb7\xbf\x67\x93\x36\x8d\x1b\x12\xdd\xfd\x20\x22\x5e\x44\x7c\x9f\x11\x45\x37\x29\xc2\x0f\xf2\x68\x37\x41\xb3\x3f\xdf\x82\xcc\x52\xaa\xa6\x33\x20\x2c\xb6\x02\x30\x83\x1d\x0a\xd4\x21\x6c\x30\x22\xda\xea\x3b\x0a\x41\xb4\xf2\x5d\x4a\x9d\xcb\x98\x2a\xca\xf5\x6e\x3c\xd3\x65\xe4\x02\xa6\x97\x9f\x2e\x67\x10\x11\xc6\xb8\x26\xf7\xe4\x42\x83\xc7\xf0\x83\xaa\x1d\xa4\x54\x2a\xb9\x74\x87\x3d\x6f\x62\xd6\x45\x20\xe6\x4f\x23\xf5\x1f\x49\xfa\x12\x39\xd3\x83\x60\x10\xc0\xa7\x7e\x5b\x2d\x58\x23\x80\xb4\xf4\xfe\x1b\x00\x00\xff\xff\x37\xd2\xa8\x62\x50\x20\x00\x00"),
 		},
 		"/terraform-modules/bootkube/conditional.tf": &vfsgen۰CompressedFileInfo{
 			name:             "conditional.tf",
@@ -5917,9 +5917,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/terraform-modules/bootkube/resources/charts/kubernetes.yaml": &vfsgen۰CompressedFileInfo{
 			name:             "kubernetes.yaml",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 1002,
+			uncompressedSize: 953,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x9c\x92\xc1\xab\x13\x31\x10\xc6\xef\xfb\x57\xe4\xf0\x04\x3d\x08\x9e\xf7\x20\xe8\xf6\x52\xf4\xc1\xf2\xea\x4d\x64\x48\x93\xd9\xbe\xd0\x34\x09\x93\x6c\x69\x29\xdb\xbf\x5d\x26\xc9\x6e\x5b\x45\x50\x6f\xed\x6f\xbe\x99\xf9\xbe\x9d\x28\xef\x12\x79\x6b\x91\x9e\xa5\x93\x3b\xa4\xb6\x11\x22\x22\x1d\x8d\xc2\x4f\x4a\xf9\xd1\xa5\x2f\x78\x6e\xc5\xd3\xa5\x42\x59\x20\xec\xf1\x3c\x35\x42\x28\xd9\x21\x25\xae\x2b\x09\x0a\x29\x15\x58\x7b\x94\x9c\x75\xe6\x20\x77\xc8\x68\x3f\x6e\x11\x6e\x5b\xe1\x50\xd6\x42\x16\xe4\x66\xeb\x47\xdd\x93\x3f\x1a\x8d\x94\x87\x30\x80\x50\xc9\x74\xf3\xd7\xad\x57\x2f\x77\xce\x40\x19\x9d\xcb\xc1\xeb\xb9\x14\xbc\x5e\x70\x5d\xda\x5b\xe9\xf0\x05\x83\x35\x4a\xc6\x3c\xbf\x70\x08\x5c\x00\xaa\x15\xee\x48\x34\xc6\x84\x9a\x13\xc6\x95\xc9\x66\x2a\xca\x51\x23\x68\x43\x53\xc3\x89\x7a\xf2\xa7\x73\xfb\x5b\xce\xc0\xf8\x16\xed\x0f\xc6\xfe\x6e\x4d\x0e\xe0\x12\x49\xb5\x7f\x96\xa7\x1e\xa9\xf3\x84\xd5\x7f\xc1\x70\x90\x27\x08\x48\xa0\x3c\x61\xf1\xb5\x51\xaf\xa8\x47\x5b\xce\xfa\xe8\x2d\xce\xa5\xbb\x4f\xff\x8f\x5f\x88\xe7\x74\xde\x0d\x66\xb7\x76\x9d\x65\xc7\xcb\xf3\x29\xa7\x2b\xbf\xa6\x86\x0d\x69\x17\xdb\x7c\xde\xac\x5b\xf9\x83\x34\x6e\x33\x0e\x83\x39\x95\x23\x67\x0c\x3a\x73\x88\xb9\xf0\x7f\x57\x5b\x62\xd6\xad\xf7\x4f\x2b\x2f\x59\xf7\x0f\x1b\x5d\x84\xf9\x05\x99\x30\x35\x98\x94\x66\xa3\x6f\x2e\x57\x61\x06\x61\xd1\xed\xd2\xeb\x5b\xa6\x80\x4e\x07\x6f\x5c\x8a\xef\xc4\x47\xf1\x41\x5c\x79\xe6\xc2\xe6\x9e\xc1\x93\x18\x84\x71\xe2\xb1\xa5\xa8\xdf\x8b\xa7\xcb\x30\x55\x25\x3a\xcd\xe2\xeb\xf2\xdf\x46\xfc\x75\xa8\xf8\xfe\xe3\xa6\x36\x03\x97\xf9\xab\x5b\x4c\x6d\xd6\xc9\xad\xc5\x6f\x5f\x37\x9f\xbd\x4f\x31\x91\x0c\x9c\xac\x50\x48\x36\xc2\x76\xe6\x53\xf3\x33\x00\x00\xff\xff\x12\x72\x3c\x9f\xea\x03\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x9c\x92\x41\x8b\xdb\x30\x10\x85\xef\xfe\x15\x3a\x6c\xa1\x3d\x14\x7a\xf6\xa1\xd0\x3a\x97\xd0\x16\xcc\xa6\xb7\x52\x06\x45\x1a\x79\x45\x14\x49\x48\x72\x48\x08\xce\x6f\x2f\x23\xc9\x76\xd2\x52\x68\xf7\x96\x7c\xf3\x66\xde\x3c\x8f\x84\xb3\x29\x38\x63\x30\x7c\xe3\x96\x0f\x18\xda\x86\xb1\x88\xe1\xa4\x05\x7e\x12\xc2\x8d\x36\x7d\xc1\x4b\xcb\x9e\xae\x15\xf2\x02\xe1\x80\x97\xa9\x61\x4c\xf0\x0e\x43\xa2\xba\xe0\x20\x30\xa4\x02\x6b\x8f\xe0\xb3\x4e\x1f\xf9\x80\x84\x0e\xe3\x1e\x61\x75\x85\x63\xb1\x85\x2c\xc8\xcd\xc6\x8d\xb2\x0f\xee\xa4\x25\x86\x3c\x84\x00\xf8\x4a\xa6\x75\xbf\x6e\xbb\x79\xbe\xdb\x0c\x84\x96\xb9\xec\x9d\x9c\x4b\xde\xc9\x05\x57\xd3\xde\x70\x8b\xcf\xe8\x8d\x16\x3c\xe6\xf9\x85\x83\xa7\x02\x84\x5a\xa1\x8e\x14\xc6\x98\x50\x52\xc2\xb8\xd1\x79\x99\x8a\x72\xd4\x08\x52\x87\xa9\xa1\x44\x7d\x70\xe7\x4b\xfb\x47\x4e\x4f\x78\x8d\xf6\x97\xc5\xfe\xdd\x66\x27\x5e\x50\x8e\xa6\x5c\xe9\xd1\x2a\xce\xa5\xbb\x2f\xf9\x9f\x81\x69\x4e\xe7\xac\xd2\xc3\xd6\x76\x86\x16\x58\x5e\x43\xb9\x44\xf9\x35\x35\xc2\x05\x94\x36\xb6\xf9\x5a\x59\xb7\x71\x47\xae\xed\x6e\x54\x4a\x9f\xcb\xcd\x32\x06\x99\x39\xc4\x5c\x78\xdd\x11\x96\x98\xd5\xf5\xfe\xa5\x64\x93\x6d\xff\xe0\x68\x23\xcc\x0f\x42\xfb\xa9\xc1\x24\x24\x2d\xfa\xe6\x7a\x63\x5a\x31\x83\x76\x48\x2f\x6f\x89\x02\x5a\xe9\x9d\xb6\x29\xbe\x63\x1f\xd9\x07\x76\xa3\x99\x0b\x9b\x7b\x94\x0b\x4c\x31\x6d\xd9\x63\x4b\x51\xbf\x67\x4f\x57\x35\x55\x25\x5a\x49\xe2\xdb\xf2\xdf\x44\xfc\x7d\x28\xfb\xf1\x73\x55\x6b\x45\x65\xfa\xea\x06\x53\x9b\x75\x7c\x6f\xf0\xfb\xd7\xdd\x67\xe7\x52\x4c\x81\x7b\x4a\x56\x28\x24\x13\x61\x3f\xf3\xa9\xf9\x15\x00\x00\xff\xff\x71\xdf\x08\xe1\xb9\x03\x00\x00"),
 		},
 		"/terraform-modules/bootkube/resources/charts/lokomotive.yaml": &vfsgen۰FileInfo{
 			name:    "lokomotive.yaml",
@@ -5976,9 +5976,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/terraform-modules/bootkube/variables.tf": &vfsgen۰CompressedFileInfo{
 			name:             "variables.tf",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 5587,
+			uncompressedSize: 5329,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xac\x58\x5f\x6f\xdb\x38\x12\x7f\xf7\xa7\x18\x64\x5f\x52\xa0\x96\xed\xc4\x69\xbb\xc1\xf6\x61\x2f\xed\x43\xb0\x6d\x2f\x77\x9b\xde\x3d\x1c\x0e\xc2\x98\x1c\x49\x84\x29\x92\x47\x52\x8e\x8d\x43\xbf\xfb\x82\xa4\x2c\x5b\x8e\xec\xb8\x68\xf3\x52\xb8\x9e\x19\xfe\xe6\xdf\x6f\x66\xbc\x42\x2b\x70\x21\x09\x2e\x98\x6c\x9c\x27\x9b\x2b\xac\xe9\x02\xfe\x3f\x02\xe0\xe4\x98\x15\xc6\x0b\xad\xe0\x3d\x5c\xdc\x25\x01\x88\x02\x23\x00\xbf\x31\x04\xed\xdf\x7b\x70\xde\x0a\x55\x8e\xbe\x8d\x46\x3b\x93\x68\x44\xee\xc8\xae\xc8\xba\x41\x8b\x9f\x84\xf3\xa0\x0b\xe0\xba\x46\xa1\xa2\x61\x07\x8d\x23\x0e\x5e\x83\x25\x64\x15\x2c\x9b\x05\x8d\xd1\x88\x64\x06\x0a\xab\x6b\x78\x12\xbe\x12\x0a\x7c\x45\xd0\x82\x7e\x0e\x47\x0a\xe7\x2f\x13\xa6\x57\x01\xd4\x2f\xf0\xef\x8a\x14\x28\xed\xc1\x91\x7f\x1d\x95\x57\x28\x1b\x0a\xef\xaf\xd0\x66\x7b\x58\xe1\x49\x48\x09\x0b\x8a\x50\xb2\x61\x7f\x72\x5a\x7b\xb2\x0a\xe5\xcf\x74\x0c\x15\x6c\xcd\x82\x22\xff\xa4\xed\xf2\x05\xcf\xc2\xcb\x05\x36\xd2\xb7\x5f\xfe\xe7\xbf\x47\x33\x90\x0b\x73\x3a\x0b\xc8\xb9\x08\xff\x87\x12\xee\x1f\x56\xf3\xf0\xd9\x92\x73\xe4\x02\xe8\x05\x81\x50\x4c\x36\x9c\x38\xb4\xb1\x3f\xf0\xe0\xf1\xd3\x9f\xc0\xc8\x7a\x51\x08\x86\x7e\xa0\x42\xbe\x0b\x38\x79\xc6\x7f\xb4\x76\x82\x0d\x68\x6d\x64\x2f\x97\xc8\xc1\xe3\xa4\xb8\xd1\x42\xf9\xd3\xcf\x3f\x58\xb1\x42\x4f\x87\x11\xd3\x45\x2a\x4f\xad\xbc\xd5\x52\x86\xae\xd1\x9c\x1c\xd8\x46\x29\xa1\xca\x08\xed\x25\x48\x2f\xe6\xd6\x39\xf2\x39\x17\x76\x10\xe0\x03\xfa\x2a\x84\x02\x81\x0b\x4b\xcc\x6b\xbb\x81\xa7\x8a\x2c\x41\x49\x8a\x2c\x7a\xe2\x10\x2d\x38\x70\x95\x6e\x24\x0f\x29\x36\x12\x19\x71\xb8\x0c\xb8\x51\x28\x07\x8e\x98\x25\xef\x5e\x9d\xd7\xef\x4c\xea\x86\xe7\xc6\xea\x95\xe0\x34\x0c\xeb\xb1\x22\xd8\x0a\x40\xa1\x2d\x44\x9d\x98\x25\xc1\xc8\xc1\x25\xd5\xc6\x6f\x5a\xeb\x51\x40\xe9\x4e\xe1\x38\x8c\xc3\x58\x5d\x5c\xf4\x91\xb5\xdd\x94\xd7\xbe\x19\xe6\xb6\x2f\xf7\x20\x94\x27\x5b\x20\x23\xf8\xfc\xf8\xf5\xf9\x4b\xaa\xa9\x17\x64\x9f\xbd\x34\xbb\x99\x4e\x87\xdf\x22\xc5\xd0\xb8\x46\x62\x78\x64\xf0\xd5\x2f\x49\x12\x7a\x92\x50\x6b\x4e\x40\xc2\x57\x64\x41\x18\x61\x40\x5b\x58\xad\x25\x2a\xb8\xd4\x4a\x6e\x00\x8d\x91\x22\x75\x25\x43\x29\x98\xfe\x8e\xb0\x04\x7b\x47\x42\x23\x4c\x8e\x8d\xd7\x9c\x3c\xb1\x80\x23\xaf\xc9\x57\x9a\x0f\x02\xff\x1c\xbf\x8a\xe5\xd5\xa9\xc4\x82\xaf\xb4\xf3\xbd\x5e\xf8\x09\x98\x0b\x61\x9d\x1f\x17\xba\x51\xfc\x00\xba\xd1\x3c\x67\x82\x0f\x57\xda\xdd\xfd\x87\x7f\xc2\xfd\x03\x58\x54\x25\x45\xa8\xce\x89\x52\xc1\x1f\xcd\x82\xac\x22\x4f\x0e\x8c\xe6\xee\x7c\x1c\xb3\x69\x76\x95\x4d\xb3\xe9\x64\xf6\xe6\x00\x47\x5b\xbd\x47\xb1\xfc\xf6\xdb\xc7\xbf\x7f\x18\x9d\x01\x68\xdb\x06\xd9\x28\xf4\xc9\x2c\xc6\xb2\x9b\x46\x96\x22\x97\xf1\xd8\x15\x81\x7c\xf3\x8e\x7c\xd3\x3c\x9b\x4d\x7d\x75\x52\x61\xcc\x95\xcb\x46\x01\xcb\x68\xcf\xeb\x01\x8f\x93\xb7\xd7\xd1\xdb\xab\xf9\xc5\x61\x97\xa7\x45\x21\x31\x6f\xee\x9a\xa2\x10\xeb\xc1\x14\xfc\xa3\x21\x1b\xb2\x1e\xde\x4f\xd2\x2e\x0e\xef\x88\x36\xe9\x75\x60\x51\xb9\x27\xb2\xc4\x61\xb1\xe9\xb0\x9e\x9f\x9b\x16\x53\x26\x35\x43\x79\x88\x37\x91\x19\xd9\x5c\xd4\x58\xd2\x30\x9f\xdf\x6d\x85\x20\x09\x85\xfc\x34\x6e\x60\x8a\xd5\x68\x3a\x86\xee\x45\x2c\x18\x85\xb6\xba\xe1\xd9\xdf\x7b\xb8\xf8\x5f\x83\x9b\x4c\xe8\xc9\x52\xa8\x95\x96\xcb\x49\x12\x1d\x87\xc1\x70\xbb\xba\xce\x66\x6f\xb2\xf9\xc5\x9e\x8d\x9c\x29\x71\xae\x0d\xa6\xc4\xb0\x89\x6e\xfe\xb8\x97\x4c\xc4\x98\xef\xc9\xf7\xed\x15\x92\xd6\x2b\x2d\x73\x6e\xc5\x6a\x1b\xc8\xd3\xf6\x8c\xe6\x57\x1c\xa9\xd6\x6a\xdc\x2a\xf7\x2d\x86\xf7\x24\xf9\x9d\xa9\xe7\x4e\x1a\xed\x48\x70\xad\x26\xad\xec\xed\x6a\x96\xcd\x7e\xed\x5c\xd4\x96\xb8\x72\x67\x45\x3a\x89\xde\xce\xb2\x77\xd9\x34\x69\x47\xea\xa8\x88\x2d\xe3\x8c\x27\x7b\x4a\xbb\x13\xbb\x9d\x5f\x13\x9b\x2f\xe6\xb3\x39\xcd\xe7\xc5\xd5\xf4\x8a\xa6\x6f\x17\xc5\xfc\x9a\x6e\xde\xf2\xab\xc5\x4d\x51\x2c\x58\xc1\xe7\xf3\xd9\xcd\xce\xc5\x5d\x8f\xf6\x10\x2e\xdf\xb9\xac\x64\x36\x3e\xd3\x5b\xa3\xfa\x3e\x46\x0b\xbb\xa4\xe4\x35\x2a\x2c\xc9\x0e\x59\xd8\x49\x8d\x5b\xa9\x01\x53\x8e\x55\xc4\x1b\xf9\x02\x98\x4e\x6a\xc0\x82\xb1\x7a\xbd\x79\x16\xf0\x43\x0b\x51\x6a\x5f\xfb\xdb\xc1\x82\xa5\xc2\xbf\xb9\x25\xa3\xad\x17\xaa\x4c\x2d\xd9\x6f\xb4\x85\xd6\xf2\x79\x9f\x7e\x8c\x9a\xd0\xb8\x50\x35\xda\x02\x2a\x94\x1b\x2f\x98\x83\xce\x58\x6c\x5d\xe3\xbc\x25\xac\x81\xe9\xda\x68\x45\xca\x83\x7e\x52\xa1\x0d\x2e\x1f\x45\x49\x16\x6f\xe1\x6e\x37\x87\xfa\x64\x52\xa0\x74\xd4\xc7\xeb\x6d\xa0\x17\x9e\x87\xfd\xd6\xbd\xb8\x72\x05\x76\xdb\x2d\x5d\x5a\x6d\xaf\x94\x76\x07\x4c\x5b\x58\x34\xd9\x2d\xcd\x0e\xd0\x12\x2c\xc9\xf8\xf3\x39\x6f\xd2\x38\x3b\x71\x15\x5a\x9a\x30\x1c\xef\xad\xde\xee\x90\x00\x23\xea\x15\x4a\xc1\x85\xdf\xe4\x86\xac\xd0\x3c\xaf\x74\x73\x64\xb5\xfe\x57\x2b\x19\x8f\x02\x29\xd3\x26\xbb\x67\x3e\x1c\x00\x49\xfb\xdc\x25\xe9\xdd\xdb\x37\xd3\xc1\x0a\xc0\xb2\xb4\x54\x1e\xdf\x90\xda\x74\x07\x04\x7b\x63\xf2\xf7\x9d\x16\x7c\xc2\x0d\x59\xb8\x6c\xdf\x8b\xbc\x1d\x13\xf8\x1a\x2c\x31\x5d\xd7\xa4\x38\xf1\x81\x6d\xa3\x2b\xaf\xc1\xd4\xff\x02\x8d\xd2\x45\x21\x98\x40\xf9\x1a\x3c\xd5\x46\x5b\xb4\x9b\xd7\x50\xe3\x26\x8d\xd6\x5a\x87\xc9\x1a\xa6\x99\x6e\x7c\xb8\x2b\x05\xa3\x9e\x83\xed\x21\xb7\x23\x80\x3c\xd4\xe7\xb0\x97\xdb\xa3\xef\xe0\xa4\x0a\x0a\x70\x49\x59\x99\xc1\x9b\xf9\xfc\x3a\xf8\x56\xa3\x67\x55\x5a\x55\x8f\x28\x0c\xf8\x7a\x24\x2b\xc1\x66\x3f\x2b\x5c\xb8\x98\x16\x47\xb2\xc8\xc3\x2e\x47\x3c\x6f\xc9\x77\x10\xf8\x87\x24\x9f\xe6\x39\xc9\x02\x92\xce\x96\xdc\x41\x28\xe7\x51\xca\x34\xd5\xdb\xc7\x8f\xa4\xa2\x87\xa3\xcf\x9c\xe1\xd6\xb6\x98\x17\x12\xcb\xe1\x82\xfd\x18\xbe\x87\xf8\x3d\x98\x70\xd4\xc4\xd5\x34\x00\x1a\xef\x01\xda\xc5\xe9\x47\x2f\x2f\x51\x2a\x6d\x29\x5f\xdf\x4c\x7f\xcd\x99\x4a\x73\x64\x10\xd8\x7d\x14\x84\xbb\x2f\x10\x65\x62\xe7\x04\xad\x5e\x3b\x0d\xa0\x39\x5d\x9c\x3b\x20\x0b\xa9\xd9\x92\x78\x58\xd5\x91\xa3\xc7\xb8\x81\x9e\x3e\x58\x8d\x44\x5f\x68\x5b\xc3\x56\x07\xc2\x5e\x9a\x6e\xfc\x60\x0d\x90\xb1\xb0\xb7\x87\x3e\x0a\xfc\x2a\xe5\x91\x35\xf9\xbb\x22\xb6\xd0\xda\x3b\x6f\xd1\xe4\x5e\x2f\x49\x9d\x86\xd8\x09\x43\x12\xee\x80\x84\x32\x4b\x1c\xda\xff\xf9\x67\xfb\x31\xfa\x15\x75\xc6\x82\x03\x2a\xde\x7e\x48\x57\xec\xb1\xac\xa3\xda\x1c\xde\xff\x89\x9c\xbc\x74\x79\x87\xe5\x14\x3d\x05\x16\xff\x5b\x07\x3a\xa0\xfd\x23\x35\xc0\xb1\xd4\xf6\x5e\x2b\x50\x48\x87\x05\xe5\x42\x2d\xc2\x91\x13\x1b\x2f\x92\xc5\x70\x98\xbe\x7e\x78\x98\x3c\xde\x3d\x4c\xfe\xbc\x7b\x7c\x08\xa7\xb1\xd7\x4c\xcb\x49\xe4\x0a\x83\xc2\xc6\xd4\xa1\x94\xfa\x09\x84\x62\xba\x8e\x13\xd1\x62\x20\xb3\x30\x8b\x02\x71\x5a\x2e\x43\x8a\xdb\x1f\x29\x1c\xb1\xc6\x06\xba\x37\x5a\x0a\xb6\x39\x19\xa6\xc3\x3c\xab\x46\xca\xc3\xd8\x31\xbb\x31\x01\x3f\xcf\xdb\x67\x4f\x85\x4e\xa8\xf1\x36\x89\x26\x5c\x94\x2d\xd0\xd6\x8a\xd0\xea\x07\xba\x83\x69\xa5\xbc\x45\xb6\xcc\x6b\x5c\x87\xb1\x97\x87\x45\x70\x10\xcd\x78\xdc\x09\x8f\x6b\x5c\x8f\x0d\xd9\x71\x10\x6e\x7f\x23\xec\x0e\xa8\xb8\xd8\x64\xf0\x19\xd7\xa2\x6e\xea\x96\x58\x43\x20\xbf\xfc\xfe\x08\xc1\x44\xba\x9d\x63\x0e\xa2\x35\x30\x64\xe1\xee\xe1\x6b\x5c\x57\xe1\x72\x1a\xbe\x90\x84\xab\xc4\x99\x52\xd4\xc2\x03\xba\xb1\x70\xb1\x5c\x13\xb1\x6c\x7f\x3a\xda\xe2\x11\x6a\xef\xf1\x48\x73\xaf\x06\xa2\xd2\x92\xfc\xb7\xd1\x5f\x01\x00\x00\xff\xff\x36\xa6\x33\xcb\xd3\x15\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xac\x58\x5f\x6f\xe3\xb8\x11\x7f\xf7\xa7\x18\xf8\x5e\x72\xc0\x5a\xb6\x13\x27\xbb\x17\xdc\x3e\xb4\xc9\x3e\x04\xb7\xb7\x4d\x7b\xb9\xf6\xa1\x28\x84\x31\x39\x92\x08\x53\x24\x4b\x52\x4e\x8c\xe2\xbe\x7b\x41\x52\x96\x2d\x47\x76\x1c\xdc\xe6\x65\xe1\xf5\xcc\x8f\xbf\xf9\x3f\xe3\x35\x5a\x81\x4b\x49\x30\x66\xb2\x71\x9e\x6c\xae\xb0\xa6\x31\xfc\x6f\x04\xc0\xc9\x31\x2b\x8c\x17\x5a\xc1\x67\x18\xdf\x25\x01\x88\x02\x23\x00\xbf\x31\x04\xed\xdf\x67\x70\xde\x0a\x55\x8e\xfe\x18\x8d\x76\x90\x68\x44\xee\xc8\xae\xc9\xba\x41\xc4\xaf\xc2\x79\xd0\x05\x70\x5d\xa3\x50\x11\xd8\x41\xe3\x88\x83\xd7\x60\x09\x59\x05\xab\x66\x49\x13\x34\x22\xc1\x40\x61\x75\x0d\xcf\xc2\x57\x42\x81\xaf\x08\x5a\xd2\xaf\xe9\x48\xe1\xfc\x45\xe2\xf4\x63\x20\xf5\x03\xfc\xab\x22\x05\x4a\x7b\x70\xe4\x3f\x44\xe5\x35\xca\x86\xc2\xfb\x6b\xb4\xd9\x1e\x57\x78\x16\x52\xc2\x92\x22\x95\x6c\xd8\x9e\x9c\x5e\x3c\x59\x85\xf2\x7b\x1a\x86\x0a\xb6\xb0\xa0\xc8\x3f\x6b\xbb\x7a\xc3\xb2\xf0\x72\x81\x8d\xf4\xed\x97\xff\xfe\xcf\xd1\x08\xe4\xc2\x9c\x8e\x02\x72\x2e\xc2\xff\xa1\x84\x87\xc7\xf5\x22\x7c\xb6\xe4\x1c\xb9\x40\x7a\x49\x20\x14\x93\x0d\x27\x0e\xad\xef\x0f\x2c\x78\xfa\xfa\x1b\x30\xb2\x5e\x14\x82\xa1\x1f\xc8\x90\x77\x11\x27\xcf\xf8\x9f\xcd\x9d\x80\x01\x2d\x46\xf6\x76\x8a\x1c\x3c\x4e\x8a\x1b\x2d\x94\x3f\xfd\xfc\xa3\x15\x6b\xf4\x74\xe8\x31\x5d\xa4\xf4\xd4\xca\x5b\x2d\x65\xa8\x1a\xcd\xc9\x81\x6d\x94\x12\xaa\x8c\xd4\xde\xa2\xf4\x66\x6c\x9d\x23\x9f\x73\x61\x07\x09\x3e\xa2\xaf\x82\x2b\x10\xb8\xb0\xc4\xbc\xb6\x1b\x78\xae\xc8\x12\x94\xa4\xc8\xa2\x27\x0e\x11\xc1\x81\xab\x74\x23\x79\x08\xb1\x91\xc8\x88\xc3\x45\xe0\x8d\x42\x39\x70\xc4\x2c\x79\xf7\xe3\x79\xf5\xce\xa4\x6e\x78\x6e\xac\x5e\x0b\x4e\xc3\xb4\x9e\x2a\x82\xad\x00\x14\xda\x42\xd4\x89\x51\x12\x8c\x1c\x5c\x50\x6d\xfc\xa6\x45\x8f\x02\x4a\x77\x0a\xc7\x69\x1c\xfa\x6a\x3c\xee\x33\x6b\xab\x29\xaf\x7d\x33\xdc\xdb\xbe\x3d\x80\x50\x9e\x6c\x81\x8c\xe0\xd7\xa7\xdf\x5f\xbf\xa4\x9a\x7a\x49\xf6\xd5\x4b\xf3\xeb\xd9\x6c\xf8\x2d\x52\x0c\x8d\x6b\x24\x86\x47\x06\x5f\xfd\x96\x24\xa1\x27\x09\xb5\xe6\x04\x24\x7c\x45\x16\x84\x11\x06\xb4\x85\xf5\x8b\x44\x05\x17\x5a\xc9\x0d\xa0\x31\x52\xa4\xaa\x64\x28\x05\xd3\xef\x70\x4b\xc0\x3b\xe2\x1a\x61\x72\x6c\xbc\xe6\xe4\x89\x05\x1e\x79\x4d\xbe\xd2\x7c\x90\xf8\xaf\xf1\xab\x98\x5e\x9d\x4a\x4c\xf8\x4a\x3b\xdf\xab\x85\xef\xc0\xb9\x10\xd6\xf9\x49\xa1\x1b\xc5\x0f\xa8\x1b\xcd\x73\x26\xf8\x70\xa6\xdd\x3d\xdc\xff\x03\x1e\x1e\xc1\xa2\x2a\x29\x52\x75\x4e\x94\x0a\x7e\x69\x96\x64\x15\x79\x72\x60\x34\x77\xe7\xf3\x98\xcf\xb2\xcb\x6c\x96\xcd\xa6\xf3\x9b\x03\x1e\x6d\xf6\x1e\xe5\xf2\xf3\xcf\x5f\xfe\x76\x3f\x3a\x83\xd0\xb6\x0c\xb2\x51\xa8\x93\x79\xf4\x65\x37\x8d\x2c\xc5\x5e\xc6\x63\x55\x84\xe6\x9b\x77\xcd\x37\xcd\xb3\xf9\xcc\x57\x27\x15\x26\x5c\xb9\x6c\x14\xb8\x8c\xf6\xac\x1e\xb0\x38\x59\x7b\x15\xad\xbd\x5c\x8c\x0f\xab\x3c\x2d\x0a\xa9\xf3\xe6\xae\x29\x0a\xf1\x32\x18\x82\xbf\x37\x64\x43\xd4\xc3\xfb\x49\xda\xc5\xe1\x1d\xd9\x26\xbd\x8e\x2c\x2a\xf7\x4c\x96\x38\x2c\x37\x1d\xd7\xf3\x63\xd3\x72\xca\xa4\x66\x28\x0f\xf9\xa6\x66\x46\x36\x17\x35\x96\x34\xdc\xcf\xef\xb6\x42\x90\x84\x42\x7c\x1a\x37\x30\xc5\x6a\x34\x5d\x87\xee\x79\x2c\x80\x42\x9b\xdd\xf0\xea\xef\x33\x8c\xff\xdb\xe0\x26\x13\x7a\xba\x12\x6a\xad\xe5\x6a\x9a\x44\x27\x61\x30\xdc\xae\xaf\xb2\xf9\x4d\xb6\x18\xef\x61\xe4\x4c\x89\x73\x31\x98\x12\xc3\x10\xdd\xfc\x71\x6f\x41\x44\x9f\xef\xc9\xf7\xf1\x0a\x49\x2f\x6b\x2d\x73\x6e\xc5\x7a\xeb\xc8\xd3\x78\x46\xf3\x4b\x8e\x54\x6b\x35\x69\x95\xfb\x88\xe1\x3d\x49\x7e\x07\xf5\xda\x48\xa3\x1d\x09\xae\xd5\xb4\x95\xbd\x5d\xcf\xb3\xf9\x4f\x9d\x89\xda\x12\x57\xee\x2c\x4f\x27\xd1\xdb\x79\xf6\x29\x9b\x25\xed\xd8\x3a\x2a\x62\xab\x38\xe3\xc9\x9e\xd2\xee\xc4\x6e\x17\x57\xc4\x16\xcb\xc5\x7c\x41\x8b\x45\x71\x39\xbb\xa4\xd9\xc7\x65\xb1\xb8\xa2\xeb\x8f\xfc\x72\x79\x5d\x14\x4b\x56\xf0\xc5\x62\x7e\xbd\x33\x71\x57\xa3\x3d\x86\xab\x4f\x2e\x2b\x99\x8d\xcf\xf4\xd6\xa8\xbe\x8d\x11\x61\x17\x94\xbc\x46\x85\x25\xd9\x21\x84\x9d\xd4\xa4\x95\x1a\x80\x72\xac\x22\xde\xc8\x37\xc8\x74\x52\x03\x08\xc6\xea\x97\xcd\x2b\x87\x1f\x22\x44\xa9\x7d\xed\x3f\x0e\x16\x2c\x15\xfe\xcd\x2d\x19\x6d\xbd\x50\x65\x2a\xc9\x7e\xa1\x2d\xb5\x96\xaf\xeb\xf4\x4b\xd4\x84\xc6\x85\xac\xd1\x16\x50\xa1\xdc\x78\xc1\x1c\x74\x60\xb1\x74\x8d\xf3\x96\xb0\x06\xa6\x6b\xa3\x15\x29\x0f\xfa\x59\x85\x32\xb8\x78\x12\x25\x59\xbc\x85\xbb\xdd\x1c\xea\x37\x93\x02\xa5\xa3\x3e\x5f\x6f\x43\x7b\xe1\x79\xd8\x6f\xdd\x9b\x2b\x57\xe8\x6e\xbb\xa5\x4b\xab\xed\x95\xd2\xee\x80\x69\x0b\x8b\x90\xdd\xd2\xec\x00\x2d\xc1\x8a\x8c\x3f\xbf\xe7\x4d\x1b\x67\xa7\xae\x42\x4b\x53\x86\x93\xbd\xd5\xdb\x1d\x36\xc0\xc8\x7a\x8d\x52\x70\xe1\x37\xb9\x21\x2b\x34\xcf\x2b\xdd\x1c\x59\xad\xff\xd9\x4a\xc6\xa3\x40\xca\xb4\xc9\xee\xc1\x87\x03\x20\x69\x9f\xbb\x24\x7d\xfa\x78\x33\x1b\xcc\x00\x2c\x4b\x4b\xe5\xf1\x0d\xa9\x0d\x77\x60\xb0\x37\x26\xff\xb2\xd3\x82\xaf\xb8\x21\x0b\x17\xed\x7b\xb1\x6f\xc7\x00\x7e\x00\x4b\x4c\xd7\x35\x29\x4e\x7c\x60\xdb\xe8\xd2\x6b\x30\xf4\x3f\x40\xa3\x74\x51\x08\x26\x50\x7e\x00\x4f\xb5\xd1\x16\xed\xe6\x03\xd4\xb8\x49\xa3\xb5\xd6\x61\xb2\x86\x69\xa6\x1b\x1f\xee\x4a\xc1\xa8\x67\x60\x7b\xc8\xed\x1a\x40\x1e\xf2\x73\xd8\xca\xed\xd1\x77\x70\x52\x05\x05\xb8\xa0\xac\xcc\xe0\x66\xb1\xb8\x0a\xb6\xd5\xe8\x59\x95\x56\xd5\x23\x0a\x03\xb6\x1e\x89\x4a\xc0\xec\x47\x85\x0b\x17\xc3\xe2\x48\x16\x79\xd8\xe5\x88\xe7\x6d\xf3\x1d\x24\x7e\x9f\xe4\xd3\x3c\x27\x59\x40\xd2\xd9\x36\x77\x10\xca\x79\x94\x32\x4d\xf5\xf6\xf1\x23\xa1\xe8\xf1\xe8\x77\xce\x70\x6b\x5b\xcc\x0b\x89\xe5\x70\xc2\x7e\x09\xdf\x43\xfc\x1e\x4c\x38\x6a\xe2\x6a\x1a\x08\x4d\xf6\x08\xed\xfc\xf4\x67\x2f\x2f\x51\x2a\x6d\x29\x7f\xb9\x9e\xfd\x94\x33\x95\xe6\xc8\x20\xb1\x87\x28\x08\x77\xdf\x20\xca\xc4\xca\x09\x5a\xbd\x72\x1a\x60\x73\x3a\x39\x77\x44\x96\x52\xb3\x15\xf1\xb0\xaa\x23\x47\x8f\x71\x03\x3d\x7d\xb0\x1a\x89\xbe\xd0\xb6\x86\xad\x0e\x84\xbd\x34\xdd\xf8\x01\x0d\x90\xb1\xb0\xb7\x87\x3a\x0a\xfd\x55\xca\x23\x6b\xf2\xbb\x3c\xb6\xd4\xda\x3b\x6f\xd1\xe4\x5e\xaf\x48\x9d\xa6\xd8\x09\x43\x12\xee\x88\x84\x34\x4b\x3d\xb4\xff\xf3\xcf\xf6\x63\xb4\x2b\xea\x4c\x04\x07\x54\xbc\xfd\x90\xae\xd8\x63\x51\x47\xb5\x39\xbc\xff\x53\x73\xf2\xd2\xe5\x1d\x97\x53\xed\x29\x74\xf1\xbf\x76\xa4\x03\xdb\x5f\x52\x01\x1c\x0b\x6d\xef\xb5\x02\x85\x74\x58\x50\x2e\xd4\x32\x1c\x39\xb1\xf0\x62\xb3\x18\x76\xd3\xef\xf7\x8f\xd3\xa7\xbb\xc7\xe9\x6f\x77\x4f\x8f\xe1\x34\xf6\x9a\x69\x39\x8d\xbd\xc2\xa0\xb0\x31\x74\x28\xa5\x7e\x06\xa1\x98\xae\xe3\x44\xb4\x18\x9a\x59\x98\x45\xa1\x71\x5a\x2e\x43\x88\xdb\x1f\x29\x1c\xb1\xc6\x86\x76\x6f\xb4\x14\x6c\x73\xd2\x4d\x87\x71\x56\x8d\x94\x87\xbe\x63\x76\x63\x02\x7f\x9e\xb7\xcf\x9e\x72\x9d\x50\x93\x6d\x10\x4d\xb8\x28\x5b\xa2\x2d\x8a\xd0\xea\xbd\xd5\xf1\xff\x00\x00\x00\xff\xff\xf7\xb7\xc9\xeb\xd1\x14\x00\x00"),
 		},
 		"/terraform-modules/bootkube/versions.tf": &vfsgen۰CompressedFileInfo{
 			name:             "versions.tf",
@@ -6337,9 +6337,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/terraform-modules/packet/flatcar-linux/kubernetes/bootkube.tf": &vfsgen۰CompressedFileInfo{
 			name:             "bootkube.tf",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 2081,
+			uncompressedSize: 2026,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x8c\x55\xdd\x6a\x23\x47\x13\xbd\xd7\x53\x14\xda\x6f\x61\xfd\x61\x8f\xd6\xce\x06\x76\x0d\x22\x24\x76\x08\xbe\x31\x26\x7b\x91\x0b\x63\x9a\x56\x77\x8d\xa6\x51\xab\x6b\xe8\xaa\x91\xac\x2c\x7e\xf7\x50\xd3\x1a\x79\x2c\xdb\x21\x83\x40\xd0\xe7\xcc\xa9\xae\xbf\x33\x91\x9c\x8d\x0c\x3f\x26\x00\xb6\x0d\x86\x31\x6f\x30\xc3\x1c\x6a\xca\x6b\x2b\x9f\xa6\x1f\xf9\xac\xcd\x61\x63\x05\xab\x8f\x3c\x3d\x85\x8d\xcd\x95\x8b\x1d\x0b\x66\x93\xec\x1a\xcb\x89\x4f\x6c\xfe\xa6\x84\x27\x93\xa7\xc9\x64\x4d\xbe\x8b\x08\xd3\x05\x91\xac\xba\x05\x4e\x7b\x75\xa6\x2e\x3b\x84\xf2\xcc\x61\x5a\x55\xb3\xf2\x3b\xd0\x26\x00\x63\x65\x98\xbf\x0a\x36\x99\x00\x7c\x80\x2b\x9b\x12\x09\x74\x8c\xe0\x76\x2e\x06\x07\x1e\x5b\x4c\x1e\x93\x0b\xc8\x40\x09\x1c\x25\xc9\x14\x23\x66\x06\xca\x20\x0d\x86\x0c\xd7\xb7\xdf\x21\xa3\xa3\xec\xf9\x45\xb2\x0c\x87\x67\x0e\xf7\x7d\x3d\xaa\x67\xf4\xe1\x25\xd7\xe0\xa3\x60\x4e\x36\x2a\xf7\xb9\x46\xff\xa9\x36\x2a\x85\xe2\xfc\xab\xb8\x45\x0a\xc2\x29\x78\x08\x09\x5a\xeb\x56\x28\xc6\xe3\x26\x38\xac\xc6\xb9\x5c\x8e\xdb\xa2\x52\x1f\xfd\x7b\x91\xc3\x1b\xc1\x2d\xb3\xea\x86\x0c\x30\xce\x59\x79\x07\x68\x02\x90\x50\xb6\x94\x57\x66\x2d\xdd\x31\x6d\x04\x0d\xc9\x60\xf2\x2d\x85\x24\x7c\x20\xbe\x7b\xff\xea\xff\x95\x75\x0e\x99\xcd\x7e\xa4\x4c\x68\x37\x5f\x4a\x53\xbf\x63\x44\x27\xb0\x07\xe0\xae\xd7\x80\xdb\x9b\x2b\x58\xec\xa0\xe3\x90\x96\xda\x46\x70\x36\x9d\x65\xb4\xae\x81\x2b\x1b\x83\x23\xb0\x9d\x90\x47\x41\x27\x81\x12\x50\xdb\xff\x6d\x83\x34\x3d\xbd\x0e\x99\xa5\xd7\x6f\x88\x45\x8b\x4b\x5d\x3e\x04\xb9\xba\xb9\xfe\xb3\x1a\x25\x1c\x5a\xf3\x42\xce\xac\x51\x1a\xf2\x3a\xad\x87\xb8\xf3\xff\xfd\x70\xc1\x67\x95\xfb\xd4\x57\x84\x3c\x1e\xd2\x51\xe4\x14\xce\x4f\x9e\xa6\x9a\x54\x4b\xbe\x3f\x01\x78\x5d\xef\x01\xd3\xc5\xc0\xac\x85\x3a\xa2\x16\xda\x18\x1b\xad\x87\xa7\xb5\x0d\xc9\x70\x57\xd7\xe1\xf1\x68\x4f\x5e\x60\xda\xa4\x64\x17\x11\x4d\xc6\x96\xb2\x68\x19\x47\xf2\xc7\xd8\x33\xdd\x2e\x97\x19\x97\xb6\xaf\xe6\x31\x7d\x84\x69\x9a\x0e\xb3\xb0\xd9\xd8\x18\x7c\x90\x9d\x69\x31\x07\xf2\xa6\xa1\x2e\xf3\x70\xb5\xf7\x19\xa5\xf9\xd7\x81\x55\xb9\x6f\x19\x63\xac\xfb\x6e\xa1\x07\xb5\x85\x88\xa2\x3d\xf2\x85\x62\x14\x36\x05\x36\x7b\x78\x1f\xe5\x5f\x18\x7d\x90\xdf\x1f\x25\x5b\xa8\xa3\x5d\x32\x08\xc1\xaf\x77\x37\x50\x16\x51\xe5\x95\x68\x6c\x1b\xca\x89\x6e\x79\xb6\xa6\x70\x8b\xfa\xfb\x84\x92\xc2\x6f\x91\xdc\x0a\xca\x78\xab\xfc\x7e\x80\xd7\x28\xd6\x5b\xb1\x43\x97\x35\xd6\x87\x32\x90\x22\x2d\x5f\xce\x66\xdb\xed\xb6\x2a\x1b\x53\x39\x5a\xcf\x3c\x6e\x30\x52\x8b\x99\x67\x9e\x1c\xcf\xf6\x5e\x31\x5b\xe1\xee\xac\x46\x2b\x5d\x46\x9e\x0d\xaa\xb3\x83\xda\x70\x32\x48\x25\x14\xe0\x86\xba\xe8\xc1\xc6\xad\xdd\x31\x64\x64\x8a\x1b\xd4\xbb\x9d\x7f\xbb\xa8\xbe\x7e\xae\xbe\x56\xe7\x17\x5f\xf4\x42\x0b\xbd\x3b\x7a\x33\x88\xf4\xe3\xa6\x89\xdf\x4f\xc7\xd4\xd9\x4f\x17\xd3\x07\xcd\x56\x1d\x9b\x25\xdb\xd6\x08\xad\x30\xf1\xeb\x89\x92\xc8\xe6\xc0\x82\x5f\xd4\x90\x9d\x95\x4f\x7b\x77\x7d\xb6\x04\x73\x24\xf5\x50\x5c\x4b\xb7\xf1\x35\xc8\x27\x70\x09\xf7\x0f\xcf\x43\xfa\x32\xca\xfb\x17\x28\x1d\xfa\x0b\x21\x24\x16\x1b\x23\xb8\xde\x3b\xce\x74\x48\xce\xda\x4c\x83\x7b\xb8\xc6\x66\xd1\xef\xc7\xbe\x79\xdb\x26\xb8\x06\xb8\x09\x2d\xc3\x1f\xb7\x77\x7c\x0a\x4c\xb0\xed\x4d\x68\x98\x47\xa8\x6d\x88\x6c\x6b\x04\x5d\x21\x56\x87\x29\xc6\xa4\x75\x1d\x30\x13\xd2\x82\xba\xe4\xfb\xa9\x34\x85\x38\x1f\x32\x71\x79\xd7\xea\xa1\x37\x92\x6d\x5d\x07\x77\x64\x01\x6f\x30\x34\x9f\xb0\x4c\x94\xd1\x3c\xfe\xfc\xf9\x9b\x71\xc9\xb8\x06\xdd\x6a\xff\xc6\x5b\x50\xbf\xa8\x94\x92\x64\xeb\x56\x66\x6d\x1f\x75\x0b\x8d\xa3\x7c\xf8\xcc\xbe\x09\x4e\x9e\x26\xff\x04\x00\x00\xff\xff\xf4\xf9\x27\x63\x21\x08\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x8c\x55\x5f\x6b\xe3\xc6\x17\x7d\xd7\xa7\xb8\x78\x7f\x81\xe4\x47\x22\x6d\xd2\x2d\xec\x06\x4c\x69\x93\x52\xf2\x12\x42\xf7\xa1\x0f\x21\x0c\xe3\x99\x2b\x6b\xf0\x78\x46\xcc\xbd\xb2\xe3\x2e\xf9\xee\xe5\x6a\x2c\x47\xb6\xe3\x52\x11\x08\xcc\x39\x39\xf7\xff\x89\x8f\x46\x7b\x82\x1f\x05\x80\x6e\x9d\x22\x4c\x2b\x4c\x30\x85\x3a\xa6\xa5\xe6\xf3\xc9\x19\x5d\xb5\xc9\xad\x34\x63\x79\x46\x93\x4b\x58\xe9\x54\x1a\xdf\x11\x63\x52\x41\x2f\x31\xbf\xd8\x40\xea\xef\x18\xf0\xa2\x78\x2b\x8a\x65\xb4\x9d\x47\x98\xcc\x62\xe4\x45\x37\xc3\x49\xaf\x4e\xb1\x4b\x06\x21\x7f\x53\x98\x94\x65\x95\x7f\x76\xb4\x02\x60\xac\x0c\xd3\xa3\x60\x45\x01\xf0\x09\xee\x74\x08\x91\xa1\x23\x04\xb3\x31\xde\x19\xb0\xd8\x62\xb0\x18\x8c\x43\x82\x18\xc0\xc4\xc0\x29\x7a\x8f\x89\x20\x26\xe0\x06\x5d\x82\xfb\xc7\xef\x90\xd0\xc4\x64\x69\xaf\x58\x82\xdd\x37\x85\xe7\xbe\x1f\xe5\x3b\xfa\xb2\xcf\x55\xf8\xca\x98\x82\xf6\xc2\x7d\xef\xd1\x7f\xea\x8d\x48\x21\x1b\x7b\x14\x37\x4b\x81\xbb\x04\x0b\x2e\x40\xab\xcd\x02\x59\x59\x5c\x39\x83\xe5\xb8\x96\xdb\xf1\x58\x44\xea\xcc\x9e\x8a\xec\x3e\x08\xae\x89\x44\xd7\x25\x80\x71\xcd\xc2\xdb\x41\x05\x40\x40\x5e\xc7\xb4\x50\x4b\xee\x0e\x69\x23\x68\x28\x06\x83\x6d\xa3\x0b\x4c\x3b\xe2\xc9\xfc\xcb\xff\x97\xda\x18\x24\x52\xdb\x95\x52\xae\x5d\x7d\xc9\x43\xfd\x8e\x1e\x0d\xc3\x16\x80\xa7\x5e\x03\x1e\x1f\xee\x60\xb6\x81\x8e\x5c\x98\xcb\x18\xc1\xe8\x70\x95\x50\x9b\x06\xee\xb4\x77\x26\x82\xee\x38\x5a\x64\x34\xec\x62\x80\xd8\xf6\xbf\xd6\x8e\x9b\x9e\x5e\xbb\x44\xdc\xeb\x37\x91\x58\x9a\x1b\xbb\xb4\x0b\x72\xf7\x70\xff\x67\x39\x2a\xd8\xb5\x6a\x4f\x4e\x2d\x91\x9b\x68\x65\x5b\x77\x71\xa7\xff\xfb\x61\x9c\x4d\x22\x77\xde\x77\x24\x5a\xdc\x95\x23\xc8\x25\x5c\x5f\xbc\x4d\xa4\xa8\x36\xda\xfe\x05\xe0\xb8\xdf\x03\x26\x87\x81\x49\x1a\x75\x40\xcd\xb4\x31\x36\x3a\x0f\x1b\x97\xda\x05\x45\x5d\x5d\xbb\xd7\x83\x3b\xd9\xc3\x64\x48\x41\xcf\x3c\xaa\x84\x6d\x4c\x2c\x6d\x1c\xc9\x1f\x62\xef\x74\x3d\x9f\x27\x9c\xeb\xbe\x9b\x87\xf4\x11\x26\x65\x1a\x4c\x4c\x6a\xa5\xbd\xb3\x8e\x37\xaa\xc5\xe4\xa2\x55\x4d\xec\x12\x0d\xa9\x9d\x66\xe4\xe1\xdf\x3b\x12\xe5\x7e\x64\x84\xbe\xee\xa7\x85\x16\xc4\x16\x3c\xb2\xcc\xc8\x66\x8a\x12\x58\x65\x58\x6d\xe1\x6d\x94\x7f\x61\xf4\x41\x7e\x7f\xe5\xa4\xa1\xf6\x7a\x4e\xc0\x11\x7e\x7d\x7a\x80\x7c\x88\x22\x2f\x44\xa5\x5b\x97\x5f\xe4\xca\x93\x56\x99\x9b\xd5\x4f\x13\x72\x09\xbf\xf9\x68\x16\x90\xd7\x5b\xe4\xb7\x0b\xbc\x44\xd6\x56\xb3\x1e\xa6\x2c\xb1\x3e\xe5\x85\x64\x6e\xe9\xb6\xaa\xd6\xeb\x75\x99\x2f\xa6\x34\x71\x59\x59\x5c\xa1\x8f\x2d\x26\xaa\x6c\x34\x54\x6d\xbd\xa2\x5a\xe0\xe6\xaa\x46\xcd\x5d\x42\xaa\x06\xd5\x6a\xa7\x36\xbc\x0c\x52\x01\x19\xa8\x89\x9d\xb7\xa0\xfd\x5a\x6f\x08\x12\x52\xf4\x2b\x94\xdc\xae\xbf\xdd\x94\x5f\x3f\x97\x5f\xcb\xeb\x9b\x2f\x92\xd0\x4c\x72\x47\xab\x06\x91\x7e\xdd\xa4\xf0\xe7\xc9\x98\x5a\xfd\x74\x33\x79\x91\x6a\xc5\xb1\x89\x93\x6e\x15\xc7\x05\x06\x3a\xde\x28\xf6\xa4\x76\x2c\xf8\x45\x0c\xd9\x68\x3e\xdf\xba\xeb\xbb\x25\xa8\x03\xa9\x97\xec\x5a\x72\x8d\xc7\x20\x5d\xc0\x2d\x3c\xbf\xbc\x2f\xe9\x7e\x94\xd3\x09\xe4\x09\xfd\x85\xe0\x02\xb1\xf6\x1e\x4c\xef\x1d\x57\xb2\x24\x57\x6d\x8a\x83\x7b\x98\x46\x27\x96\xff\x1f\xdb\xe1\xad\x1b\x67\x1a\xa0\xc6\xb5\x04\x7f\x3c\x3e\xd1\x25\x50\x84\x75\x6f\x42\xc3\x3e\x42\xad\x9d\x27\x5d\x23\xc8\x09\x91\x38\x4c\x36\x26\xe9\xeb\x80\x29\x17\x66\xb1\x0b\xb6\xdf\x4a\x95\x89\xd3\xa1\x12\x93\x36\xad\x3c\x5a\xc5\x49\xd7\xb5\x33\x07\x16\xf0\x01\x43\xea\x71\xf3\x10\x13\xaa\xd7\x9f\x3f\x7f\x53\x26\x28\xd3\xa0\x59\x6c\xff\xe2\x23\xa8\x78\x2b\xfe\x09\x00\x00\xff\xff\x12\xbe\x18\xe4\xea\x07\x00\x00"),
 		},
 		"/terraform-modules/packet/flatcar-linux/kubernetes/bootstrap-configs.tf": &vfsgen۰CompressedFileInfo{
 			name:             "bootstrap-configs.tf",
@@ -6404,9 +6404,9 @@ var vfsgenAssets = func() http.FileSystem {
 		"/terraform-modules/packet/flatcar-linux/kubernetes/variables.tf": &vfsgen۰CompressedFileInfo{
 			name:             "variables.tf",
 			modTime:          time.Date(1970, 1, 1, 0, 0, 1, 0, time.UTC),
-			uncompressedSize: 6325,
+			uncompressedSize: 6067,
 
-			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xa4\x58\x7b\x4f\x1c\x39\x12\xff\x7f\x3e\x45\x69\x76\x25\x40\xa2\x9b\xc7\x12\x12\x50\x72\x52\x02\x59\x05\x2d\xb0\xdc\x41\x4e\xa7\xbb\x8d\x3a\x1e\xbb\xba\xdb\x37\x6e\xbb\xcf\x76\xcf\x63\xa3\x7c\xf7\x53\xd9\xdd\xc3\x3c\x7a\x08\xdc\xe5\x9f\x00\x53\xfe\xd5\xaf\xde\x55\xf3\x13\x5c\xde\xde\x83\x45\x6e\xac\x70\x83\xc1\x84\x59\xc9\x46\x0a\x61\xc8\x55\xe3\x3c\xda\x4c\xb3\x0a\x87\xf0\x6d\x00\xe0\xe7\x35\x42\xfb\xef\x1d\x38\x6f\xa5\x2e\x06\x00\x02\x1d\xb7\xb2\xf6\xd2\x68\x78\x07\xc3\xcf\x5a\xfe\xa7\x41\x68\x9f\x03\x3d\x87\xdd\xda\x62\x8d\x5a\xa0\x00\x6f\x40\x68\x97\xfd\x69\x34\xee\x0d\x07\xdf\x97\x35\x76\x7f\x7f\x89\x36\x22\xff\x4f\xa3\x11\x76\x31\x2d\x52\xc0\x19\xab\x6a\x85\x29\x37\xd5\x3a\x7a\x6d\xcd\xbf\x91\xfb\x4c\x8a\x88\xbf\x06\x74\xc7\xf8\x18\x3d\xb4\x52\x70\x75\xd9\x22\x9e\x1c\xbe\xc2\x1c\xcf\x78\xc2\x39\x9e\x25\x27\xfc\xf5\x51\xf2\xe6\x35\x3f\x4a\xce\x4e\xce\xf8\xf1\xd9\xe1\xe8\xf8\xb5\xe0\x51\xd5\x4f\x70\x6b\x04\xae\xf8\xd0\xb8\x8c\x59\x5e\xfe\xc0\xa0\x9c\x35\xca\xb7\x7f\x1e\xb2\x4a\x9c\x9e\x0c\x37\xf9\xfd\xaa\x98\xe7\xcc\xc2\x85\xd1\x9e\x49\x8d\x16\xae\xa5\x6e\x66\x40\xf8\xd2\x23\xf7\x8d\x45\x72\xae\xd4\xce\x33\xa5\x60\x37\x00\xed\x03\xb3\xd5\xe9\xc9\xba\x2f\x8c\xcb\x78\xc9\xb4\x46\xf5\x12\x6a\xce\xd3\xeb\x17\x70\x6b\x75\x2c\xd3\xca\xad\xa9\x60\x37\x22\xed\xc3\x08\x3d\xdb\x07\xa6\xea\x92\xed\x03\x8a\x62\x23\x25\x8c\xcb\x26\x68\x9d\x34\xfa\x25\x44\x79\x63\x2d\x6a\xff\x02\xa6\xad\x92\x15\x07\xe6\xc6\x76\xf9\x04\x3b\xc7\x47\x67\x47\xe9\xab\xf4\x70\x07\x12\x70\x88\x50\x7a\x5f\xbb\xf3\x83\x83\xe9\x74\x9a\xe6\x11\x34\x51\x04\x95\x1a\x5b\x1c\x58\x54\xc8\x1c\xba\x83\xbd\x7d\x30\x5a\xcd\x81\xb0\xe4\xdd\x3f\x3e\xae\x99\xc7\x8d\xf6\xd6\x28\x85\x36\xe3\xa6\xd1\xbe\xcf\x48\xdd\x54\x23\xb4\x1b\x46\x1e\x6d\x1a\x77\x1b\x24\xc1\xe4\xf0\x88\xeb\x60\x57\xa6\x98\x42\xc5\xa8\x1a\xdd\xba\x7f\x97\x08\x90\xd6\x17\x39\xf9\x97\xd4\x55\x4c\xa9\x74\xf6\xe6\xb4\xc7\xd3\x6d\x3d\x05\x6f\x6a\x8e\x11\x94\xdc\xb0\xc4\x6d\x8d\x8c\xac\x67\x98\x45\x90\xac\xb1\xcb\xa9\xb9\x60\x31\x00\xa0\x32\xf3\x78\x1e\xdc\x99\x8c\x8c\xf1\x52\x17\xd0\xc5\xd5\x68\x68\x15\x9b\x09\x5a\xf8\xf4\xf0\x70\x77\x0f\xd2\x41\xce\xa4\x22\x39\xd1\x84\x22\x61\x30\x6a\x0a\x90\x3a\x80\xa4\x01\xf4\xa1\x94\x0e\x6a\xe6\x79\x49\xf2\xae\xa9\x6b\xe3\x62\xbb\xca\xe5\x0c\x7c\x29\xdd\x79\x08\xfa\xf9\xc1\x41\x21\x7d\x4a\x5c\x43\xa8\xc3\x0f\x85\xf4\x07\xdc\x54\x95\xf4\x42\xe6\xf9\xc1\xe8\x34\xcf\xf1\xf8\x0d\x3b\x0e\xc8\x9f\xcc\x14\x27\x68\xf7\xc1\x97\x08\x4d\xed\xbc\x45\x56\x05\x54\xce\x34\x4c\x8d\x1d\xc7\x1c\x99\x96\xa8\x83\x4c\x64\xed\xd0\x92\x09\xc2\xa0\x03\x6d\x3c\x58\x54\x73\xb2\x0f\x95\x22\x2f\xf3\x80\xcd\x1b\x3b\x41\x97\xc2\xbd\x81\x29\x82\x2b\x4d\xa3\x04\x34\xae\xc3\x58\xe4\x5e\x04\x73\x30\x95\xbe\x34\x8d\x5f\x80\xb4\x00\xfb\xc0\xb4\x00\xe3\x4b\xb4\x53\xe9\x30\x40\x77\x28\x29\xfc\x6a\xac\x6f\x34\xf3\xa8\xe6\xfb\xe0\x24\x45\x33\x16\x70\xda\xe6\xf9\x5a\x05\x68\xf4\xcf\xa4\x2d\x7d\xc7\x99\x44\x47\x08\x8c\x1a\xf0\x48\x61\x45\xc1\xf1\x25\xf3\xc0\x09\x3f\x3c\xba\xf2\x50\x32\x07\x23\x44\x0d\xb5\x71\x4e\x52\xd2\x78\x03\x9a\x79\x39\x21\x2d\x5d\xe5\x76\xc9\x20\x2b\x56\xa0\x03\xe6\xc0\xe4\xb9\xe4\x92\x29\xf8\xfd\x1e\x4c\x4c\xd1\x45\xa6\xec\x07\xf0\x51\xe3\x1f\xbd\x15\x5a\x67\x0a\x0f\x25\x5a\xa4\x6c\xd0\x26\xb6\xd1\x55\x64\x60\x13\x26\x55\x48\xdd\x05\x58\xba\x54\x27\xef\x60\x38\x1c\x6c\x16\xc6\xb5\xe1\xcc\xb7\xbd\x46\x19\x26\x42\xc8\xeb\x19\x02\xe5\x32\x44\xd1\xd0\x26\xd7\xaa\x23\x67\x5c\x2a\xe9\xe7\x2f\x99\x8e\x6d\x2d\x74\x4f\xc3\xf0\xc5\x5a\x99\x79\x50\xda\x8d\x68\xa9\x9f\x68\x4b\x8a\x67\x4e\xcb\xba\x46\xef\xfa\x34\x2b\xe9\xfc\x6e\x54\xbf\xb7\xa9\xff\x62\x01\xb4\xd1\x71\x2f\x8c\xce\x65\x01\x0b\xec\x8d\x06\xf3\xaf\x2f\x71\xa8\x46\xc1\xc6\x06\xa7\x2d\xb3\x74\xae\xcc\xc6\x38\xff\x1f\x68\xdd\xdf\x7f\x82\xba\x19\x29\xc9\x81\x00\x42\xcc\x1b\x87\x16\x76\xb8\xb1\xb8\xb3\xe6\x0d\xe6\x1c\xfa\x4c\x48\xbb\x65\x6f\xf0\x65\x6c\x29\x42\x5a\xe4\xde\xd8\x50\xc9\x16\xa1\x40\x8d\x96\x79\x14\x10\x10\x5c\x97\xea\x23\x84\x5a\x31\x8e\x02\x76\x79\x74\x8a\x03\x87\xdc\xa2\xa7\xf6\xbc\x25\xb4\x2b\x8c\x34\x7a\x6a\x1b\x59\xe5\x9b\x7e\x4e\xe5\xdc\x49\xce\x14\xdc\x46\x41\xb8\x79\xf8\x9c\x6e\x42\xb7\x93\xa5\x17\x5a\xd6\x19\x6b\xbc\x11\x48\xab\x85\x34\x3a\xab\xd0\x97\xa6\x7f\x75\xba\x09\x1f\x05\x27\x2c\x9e\x84\x04\x2b\x8d\xf3\x70\x75\x37\x39\x01\x26\x84\x45\xe7\xb6\x9a\xb7\x31\x5d\x72\x69\x9d\x4f\x72\xd3\x68\xb1\xbe\xc7\x19\x91\x71\x29\xfa\xa3\x71\x71\x75\xf9\xb7\xa8\xd1\x32\x5d\xc4\x5e\xef\x9c\x2c\x34\xfc\xd6\x8c\xd0\x6a\xf4\xe8\xa0\x36\xe2\x05\x4c\x8e\x0e\xd3\xe3\xf4\x30\x3d\x3c\x38\x3a\x5d\x63\x42\x4d\x55\x72\xdc\xca\xe6\xed\xdb\x8f\xbf\x5f\x0e\x9e\x45\xa9\x85\x72\xe9\xe0\xa1\x44\x38\x0a\x6e\x83\xa9\x54\x8a\xb2\xc5\x62\x68\xdf\x22\xe4\xe9\xb8\x19\x61\xc6\x6a\x19\x3b\x7a\x1c\x2a\x47\x87\xbe\xdc\xfa\x80\x52\x5a\x68\x97\x0e\x88\xcc\x60\xc9\xec\x1e\x93\xa3\xb9\xbf\xf4\x9b\xdb\x1d\x04\xc2\x54\x4c\xea\xcc\x35\x79\x2e\x67\xbd\x51\xf8\x6b\x83\x56\x62\xac\xab\x28\x1d\x27\x4f\x20\x1b\xdf\x2d\xb8\x32\xed\xa6\x68\x51\xc0\x68\xbe\xa0\x0a\x97\x2d\x1f\xe9\xba\x26\x95\x2a\x43\x09\x1d\x77\xf2\xdc\x98\xb4\xa5\x9c\xba\x09\x4f\x57\x64\xf6\xe0\xf9\xb1\x5d\x79\xb8\x66\x2e\x6a\xfa\x3f\xb3\x58\x1b\x4b\x3b\x46\x5f\x9b\x19\x19\xa3\x36\xcd\xff\x18\x5e\x42\xe3\x68\x48\xd0\x38\xd1\x4c\xcd\xbd\xe4\x0e\x16\x60\x94\x05\xdd\x2a\xe0\x60\xf7\x82\x29\xc9\xcd\xde\x66\x13\xcc\x99\x72\xb8\xca\xab\x62\x9a\x15\x58\xa1\xf6\x21\xf1\x5c\x6f\x04\xae\xa5\xf3\xb4\x08\x86\xbc\xa3\x0c\x74\x54\x9b\xa5\xb1\xf2\xcf\xb8\xd4\x30\xce\xd1\x39\x62\x17\xf1\x96\x07\xc2\xa6\xff\x56\xda\xe9\x6a\xbf\x30\x02\xb3\xda\xca\x09\xf3\xdb\x0b\x61\x78\x17\x05\x1e\xe9\x10\x37\xd2\x48\xcf\x1d\xf5\xde\x48\x4a\x29\x33\x05\xa9\x3d\xda\x84\x3e\x01\x6f\x19\x4d\xee\xe7\x75\xc5\x36\x60\xac\x28\x2c\x16\x61\x5a\xf4\x72\x69\xa3\x43\xda\x97\x0a\xf0\xfd\xe3\x2b\xb8\x66\x73\xb4\xb0\xdb\x46\xc2\x11\x33\x6f\x1b\xec\x69\xce\x8b\xf8\x2f\xc7\x8c\x64\x57\x99\xc5\x7a\x0c\xe0\x99\x14\xfd\x11\xbb\xaf\x91\xcb\x7c\xde\xad\xaf\x25\xb3\x62\xca\x2c\xe5\xdf\xf2\xdb\x78\x48\xb4\x3b\xb5\x4b\xe1\x3d\x54\xac\x6e\xe7\x0d\x59\x34\xc6\xb0\xc1\x54\x2c\xd4\xce\xce\xe3\x20\x4f\x7e\xfe\xf9\x9b\xd4\x02\x67\xdf\x77\xc2\xae\x47\xc2\x13\xa6\x9a\xb0\xdf\xd0\x2f\x4b\x7a\xe0\xea\x32\x8d\xb7\x6c\x58\xcb\x6a\xfa\x48\xfb\xb8\x91\x61\x54\x48\xc5\x4b\x0b\xe2\x23\x8c\xc9\xe1\xeb\x9a\x9d\x59\xeb\x97\xaf\xd0\xb9\x22\x85\x8f\xf1\xa0\x3a\x87\x35\x59\x78\x07\xdf\x96\x4e\x83\xe4\x10\xde\xc1\x1f\xc3\xb7\xab\x52\x7f\xf9\x63\x08\xdf\x37\xa3\x50\xb1\x7a\x65\xd6\x2f\x07\xe3\xdb\xf7\x27\x43\xd1\x51\xdc\xde\xbe\xef\xba\x4d\x33\x98\xe9\xce\x61\x38\x0c\x0e\x1c\x6a\x9c\xf9\x64\xb1\x02\x0e\xd3\xc1\xa0\x0b\x21\x5b\x70\x58\x75\x6a\x08\x9e\x5e\xf8\x95\x8a\x0a\x45\xe7\xd6\x75\xe7\x7d\x1d\x54\xac\x4e\xe1\xbd\x06\xac\x6a\x3f\x6f\x33\x1e\x2a\x64\xda\xc1\x90\x7c\xaf\xcd\x22\x4b\x96\x15\x0d\x53\xf8\xba\xca\xed\x6b\x88\xd7\x80\x97\xc6\x38\x6a\xb8\xf3\x15\x5e\x61\xcb\xae\xe8\xf0\xc1\x98\x09\xb5\x31\x6a\xc7\x81\x40\x9a\x48\xd1\xd5\x64\x70\xb7\x44\x3e\x77\x90\xac\x7f\xb9\x23\x5d\x28\x4f\x87\x2a\xcf\x68\x31\x40\x91\xd1\x2c\x53\xd8\xeb\xfc\xe1\x65\x94\x8f\x23\x03\x55\x0e\xf1\x0d\xb4\x6f\xba\x65\x3f\x0e\x8e\x2e\x8a\xfd\x05\xda\xd7\x25\xbc\x72\x19\x2d\xdc\xce\x5b\x56\x3f\xd5\x27\x1e\xae\xef\xe1\x43\x27\x18\x22\xf8\x5b\x64\xd0\xb3\x50\x6d\x6a\xa3\x5d\x0a\xed\xa3\xa6\xcc\x9b\x31\xea\xa7\x7b\x76\x10\x49\xa4\x88\x75\x1a\x7e\x89\xeb\x21\x7d\x88\x8c\x97\x21\x87\x7a\xd4\x87\x2e\xcd\xf4\x7c\xaf\x5d\x9c\xd1\x7a\x99\x4b\xce\xfc\xea\x97\x52\x1c\xad\x77\xd9\x84\x29\x29\xa4\x9f\x67\x35\x5a\x69\x44\x56\x9a\x66\xcb\x2c\xf9\x7b\x2b\x49\xea\xe9\xbc\x0a\x93\x62\x09\x9b\x32\x38\xbe\x7e\xee\x77\x17\x6f\x5e\x9f\x1e\xae\xfa\xc9\xb3\xe2\x07\x4e\x61\x85\x8b\xa9\xda\x2d\x0e\xb5\x35\x35\x2b\xc2\x7e\xed\x4d\xfb\xfd\x46\xac\xae\x1f\xcc\xaf\x8d\x43\x63\x78\x13\x46\xa0\xf8\x30\x3f\xbf\x36\x63\x53\x19\xba\x27\x87\xfb\x30\xbc\xb0\x48\xf8\x1f\xe6\xe7\x9f\xb5\x0b\xc5\x2d\x51\x0c\xbf\x6c\x4e\x40\xea\x23\x35\x6a\x91\x6d\x99\x39\x37\x6c\xdc\x4e\xd8\xc7\x83\x28\x36\x82\xf8\x0e\x4c\x6c\x02\xaa\xb5\xd6\xa2\x33\x8d\x0d\x1d\xfe\x46\x16\xa5\x0f\xdf\xa4\x15\xb8\x0f\x55\xe3\x7c\x77\x2b\x87\xa9\x39\x9a\x03\xd3\x80\x5a\x24\x74\xc0\x3c\x95\x13\xeb\x66\xeb\x46\xad\x25\xeb\xea\x6a\x99\xe1\xcc\x5b\x96\xe5\x6a\x5b\x68\x3e\xd2\xe7\x10\x3e\x87\x9a\x4e\x9c\x10\x08\xaa\xd5\x64\xa9\x56\x93\x05\xe0\xb6\x8c\xdd\x1a\x97\x2f\xeb\x95\xcb\xed\xbc\xf6\x19\x1d\x00\xdd\x62\xf0\x44\xe1\x4a\x9d\x74\x07\x6e\x4d\xd7\x49\x7c\x01\x2d\x8a\x34\x7a\x5b\x01\x3f\x63\x07\x93\x85\x36\x16\xb3\xd9\xab\xc3\xb3\x8c\xeb\x8c\x97\xc8\xc7\xbd\x5c\xae\x82\x20\x5c\xdc\x42\x90\x09\xb5\x42\xaf\x56\x0a\xe8\xff\x20\xc2\x8d\xd6\xde\x32\x3e\xce\x2a\x36\xa3\x52\xce\x68\x87\xee\xa5\x92\x24\x0b\xe1\xa4\x62\xb3\xa4\x46\x9b\x90\x70\x3b\xbf\xbb\xdb\x22\xa9\xad\x99\xcd\x53\xb8\x61\x33\x59\x35\x55\x5b\xc2\x94\x94\xb7\xef\x1f\x28\x7f\x75\x3c\x08\xdb\xb5\x88\xf1\x31\xd4\x74\xde\xdf\x7d\x0e\xeb\x3b\xec\x1e\x86\x2f\x36\x90\x4d\xb0\x4d\xe9\x4a\x7a\x60\x2e\x91\x2e\x34\xb4\xe8\xba\xae\x18\x3a\x3e\x52\x2f\x29\x0f\x39\xb5\xf7\xd4\xc1\xfa\xdf\x00\x00\x00\xff\xff\x9f\xf5\xa8\x5b\xb5\x18\x00\x00"),
+			compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x9c\x58\x6d\x4f\x1c\x39\x12\xfe\x3e\xbf\xa2\xd4\xbb\x12\x20\xcd\x34\x03\x4b\x48\x40\xc9\x49\x09\x64\x15\xb4\x24\xcb\x1d\xe4\x74\xba\xdb\xa8\xe3\xb1\xab\xbb\x7d\xb8\xed\x3e\x97\x7b\x5e\x36\xca\x7f\x3f\xd9\xee\x1e\xe6\xa5\x87\xc0\xe6\x4b\x80\xa9\x7a\xea\xa9\xf7\xf2\xfc\x04\x97\x9f\x6e\xc1\x22\x37\x56\xd0\x60\x30\x65\x56\xb2\x89\x42\x48\xb8\x6a\xc8\xa1\xcd\x34\xab\x30\x81\x6f\x03\x00\xb7\xa8\x11\xda\x7f\x6f\x80\x9c\x95\xba\x18\x00\x08\x24\x6e\x65\xed\xa4\xd1\xf0\x06\x92\xcf\x5a\xfe\xaf\x41\x68\xd5\xc1\xab\xc3\x7e\x6d\xb1\x46\x2d\x50\x80\x33\x20\x34\x65\x7f\x1a\x8d\x07\xc9\xe0\xfb\xaa\xc5\xee\xef\xcf\xb1\xe6\xc9\xff\xdb\x68\x84\x7d\x4c\x8b\x14\x70\xce\xaa\x5a\x61\xca\x4d\xb5\x89\x5e\x5b\xf3\x5f\xe4\x2e\x93\x22\xe2\x6f\x00\xdd\x30\x7e\x8f\x0e\x5a\x29\xb8\xba\x6c\x11\x4f\xc6\x2f\x30\xc7\x33\x3e\xe2\x1c\xcf\x46\x27\xfc\xe5\xd1\xe8\xd5\x4b\x7e\x34\x3a\x3b\x39\xe3\xc7\x67\xe3\xc9\xf1\x4b\xc1\xa3\xa9\x9f\xe0\x93\x11\xb8\x16\x43\x43\x19\xb3\xbc\xfc\x81\x43\x39\x6b\x94\x6b\xff\x9c\xb0\x4a\x9c\x9e\x24\xdb\xfc\x7e\x55\xcc\x71\x66\xe1\xc2\x68\xc7\xa4\x46\x0b\xd7\x52\x37\x73\xf0\xf8\xd2\x21\x77\x8d\x45\x1f\x5c\xa9\xc9\x31\xa5\x60\x3f\x00\x0d\x81\xd9\xea\xf4\x64\x33\x16\x86\x32\x5e\x32\xad\x51\x3d\x87\x1a\x39\xaf\xfd\x0c\x6e\xad\x8d\x55\x5a\xb9\x35\x15\xec\x47\xa4\x21\x4c\xd0\xb1\x21\x30\x55\x97\x6c\x08\x28\x8a\xad\x92\x30\x94\x4d\xd1\x92\x34\xfa\x39\x44\x79\x63\x2d\x6a\xf7\x0c\xa6\xad\x91\xb5\x00\xe6\xc6\x76\xf5\x04\x7b\xc7\x47\x67\x47\xe9\x8b\x74\xbc\x07\x23\x20\x44\x28\x9d\xab\xe9\xfc\xf0\x70\x36\x9b\xa5\x79\x04\x1d\x29\x0f\x95\x1a\x5b\x1c\x5a\x54\xc8\x08\xe9\xf0\x60\x08\x46\xab\x05\x78\x2c\x79\xf3\xaf\xf7\x1b\xee\x71\xa3\x9d\x35\x4a\xa1\xcd\xb8\x69\xb4\xeb\x73\x52\x37\xd5\x04\xed\x96\x93\x47\xdb\xce\x7d\x0a\x92\x60\x72\x78\xc0\x25\xd8\x97\x29\xa6\x50\x31\xdf\x8d\xb4\x19\xdf\x15\x02\xde\xea\xb3\x82\xfc\x4b\x4a\x15\x53\x2a\x9d\xbf\x3a\xed\x89\x74\xdb\x4f\x21\x9a\x9a\x63\x04\xf5\x61\x58\xe1\xb6\x41\x46\xd6\x73\xcc\x22\x48\xd6\xd8\xd5\xd2\x5c\xb2\x18\x00\xf8\x36\x73\x78\x1e\xc2\x39\x9a\x18\xe3\xa4\x2e\xa0\xcb\xab\xd1\xd0\x1a\x36\x53\xb4\xf0\xe1\xee\xee\xe6\x16\x24\x41\xce\xa4\xf2\x72\xa2\x09\x4d\xc2\x60\xd2\x14\x20\x75\x00\x49\x03\xe8\x5d\x29\x09\x6a\xe6\x78\xe9\xe5\xa9\xa9\x6b\x43\x71\x5c\xe5\x72\x0e\xae\x94\x74\x1e\x92\x7e\x7e\x78\x58\x48\x97\x7a\xae\x21\xd5\xe1\x87\x42\xba\x43\x6e\xaa\x4a\x3a\x21\xf3\xfc\x70\x72\x9a\xe7\x78\xfc\x8a\x1d\x07\xe4\x0f\x66\x86\x53\xb4\x43\x70\x25\x42\x53\x93\xb3\xc8\xaa\x80\xca\x99\x86\x99\xb1\xf7\xb1\x46\x66\x25\xea\x20\x13\x59\x13\x5a\xef\x82\x30\x48\xa0\x8d\x03\x8b\x6a\xe1\xfd\x43\xa5\x7c\x94\x79\xc0\xe6\x8d\x9d\x22\xa5\x70\x6b\x60\x86\x40\xa5\x69\x94\x80\x86\x3a\x8c\x65\xed\x45\x30\x82\x99\x74\xa5\x69\xdc\x12\xa4\x05\x18\x02\xd3\x02\x8c\x2b\xd1\xce\x24\x61\x80\xee\x50\x52\xf8\xd5\x58\xd7\x68\xe6\x50\x2d\x86\x40\xd2\x67\x33\x36\x70\xda\xd6\xf9\x46\x07\x68\x74\x4f\xa4\x2d\x5d\xc7\xd9\x8b\x4e\x10\x98\x1f\xc0\x13\x85\x95\x4f\x8e\x2b\x99\x03\xee\xf1\x83\xd2\x95\x83\x92\x11\x4c\x10\x35\xd4\x86\x48\xfa\xa2\x71\x06\x34\x73\x72\xea\xad\x74\x9d\xdb\x15\x83\xac\x58\x81\x04\x8c\xc0\xe4\xb9\xe4\x92\x29\xf8\xfd\x16\x4c\x2c\xd1\x65\xa5\x0c\x03\xf8\xa4\x71\x0f\xd1\x0a\xa3\x33\x85\xbb\x12\x2d\xfa\x6a\xd0\x26\x8e\xd1\x75\x64\x60\x53\x26\x55\x28\xdd\x25\x58\xba\xd2\x27\x6f\x20\x49\x06\xdb\x8d\x71\x6d\x38\x73\xed\xac\x51\x86\x89\x90\xf2\x7a\x8e\xe0\x6b\x19\xa2\x68\x18\x93\x1b\xdd\x91\x33\x2e\x95\x74\x8b\xe7\x6c\xc7\xb6\x17\x3a\xd5\xb0\x7c\xb1\x56\x66\x11\x8c\x76\x2b\x5a\xea\x47\xc6\x92\xe2\x19\x69\x59\xd7\xe8\xa8\xcf\xb2\x92\xe4\xf6\xa3\xf9\x83\x6d\xfb\x17\x4b\xa0\xad\x89\x7b\x61\x74\x2e\x0b\x58\x62\x6f\x0d\x98\xff\x7c\x89\x4b\x35\x0a\x36\x36\x04\x6d\x95\x25\x51\x99\xdd\xe3\xe2\x2f\xd0\xba\xbd\xfd\x00\x75\x33\x51\x92\x83\x07\x08\x39\x6f\x08\x2d\xec\x71\x63\x71\x6f\x23\x1a\x8c\x08\x5d\x26\xa4\xdd\x71\x37\xb8\x32\x8e\x14\x21\x2d\x72\x67\x6c\xe8\x64\x8b\x50\xa0\x46\xcb\x1c\x0a\x08\x08\xd4\x95\xfa\x04\xa1\x56\x8c\xa3\x80\x7d\x1e\x83\x42\x40\xc8\x2d\x3a\x3f\x9e\x77\xa4\x76\x8d\x91\x46\xe7\xc7\x46\x56\xb9\xa6\x9f\x53\xb9\x20\xc9\x99\x82\x4f\x51\x10\x3e\xde\x7d\x4e\xb7\xa1\xdb\xcd\xd2\x0b\x2d\xeb\x8c\x35\xce\x08\xf4\xa7\x85\x34\x3a\xab\xd0\x95\xa6\xff\x74\xfa\x18\x3e\x0a\x41\x58\xaa\x84\x02\x2b\x0d\x39\xb8\xba\x99\x9e\x00\x13\xc2\x22\xd1\x4e\xf7\xb6\xb6\x4b\x2e\x2d\xb9\x51\x6e\x1a\x2d\x36\xef\x38\x23\x32\x2e\x45\x7f\x36\x2e\xae\x2e\xff\x11\x2d\x5a\xa6\x8b\x38\xeb\x89\x64\xa1\xe1\xb7\x66\x82\x56\xa3\x43\x82\xda\x88\x67\x30\x39\x1a\xa7\xc7\xe9\x38\x1d\x1f\x1e\x9d\x6e\x30\xf1\x43\x55\x72\xdc\xc9\xe6\xf5\xeb\xf7\xbf\x5f\x0e\x9e\x44\xa9\x85\xa2\x74\x70\x57\x22\x1c\x85\xb0\xc1\x4c\x2a\xe5\xab\xc5\x62\x18\xdf\x22\xd4\xe9\x7d\x33\xc1\x8c\xd5\x32\x4e\xf4\xb8\x54\x8e\xc6\xae\xdc\xa9\xe0\x4b\x5a\x68\x4a\x07\x9e\xcc\x60\xc5\xed\x1e\x97\xa3\xbb\xbf\xf4\xbb\xdb\x3d\x08\x84\xa9\x98\xd4\x19\x35\x79\x2e\xe7\xbd\x59\xf8\x7b\x83\x56\x62\xec\xab\x28\x1d\x37\x4f\x20\x1b\xf5\x96\x5c\x99\xa6\x19\x5a\x14\x30\x59\x2c\xa9\xc2\x65\xcb\x47\x52\x37\xa4\x52\x65\x7c\x41\xc7\x9b\x3c\x37\x26\x6d\x29\xa7\x34\xe5\xe9\x9a\xcc\x01\x3c\x3d\xb7\x6b\x8a\x1b\xee\xa2\xf6\xff\x67\x16\x6b\x63\xfd\x8d\xd1\x37\x66\x26\xc6\xa8\x6d\xf7\xdf\x07\x4d\x68\xc8\x2f\x09\xbf\x4e\x34\x53\x0b\x27\x39\xc1\x12\xcc\x57\x41\x77\x0a\x10\xec\x5f\x30\x25\xb9\x39\xd8\x1e\x82\x39\x53\x84\xeb\xbc\x2a\xa6\x59\x81\x15\x6a\x17\x0a\x8f\x7a\x33\x70\x2d\xc9\xf9\x43\x30\xd4\x9d\xaf\x40\xf2\xbd\x59\x1a\x2b\xff\x8c\x47\x0d\xe3\x1c\x89\x3c\xbb\x88\xb7\xba\x10\xb6\xe3\xb7\x36\x4e\xd7\xe7\x85\x11\x98\xd5\x56\x4e\x99\xdb\xdd\x08\xc9\x4d\x14\x78\xa0\xe3\xb9\x79\x8b\x5e\x9d\xfc\xec\x8d\xa4\x94\x32\x33\x90\xda\xa1\x1d\xf9\x4f\xc0\x59\xe6\x37\xf7\xd3\xa6\x62\x9b\x30\x56\x14\x16\x8b\xb0\x2d\x7a\xb9\xb4\xd9\xf1\xd6\x57\x1a\xf0\xed\x83\x16\x5c\xb3\x05\x5a\xd8\x6f\x33\x41\x9e\x99\xb3\x0d\xf6\x0c\xe7\x65\xfe\x57\x73\xe6\x65\xd7\x99\xc5\x7e\x0c\xe0\x99\x14\xfd\x19\xbb\xad\x91\xcb\x7c\xd1\x9d\xaf\x25\xb3\x62\xc6\xac\xaf\xbf\x55\xdd\xf8\x90\x68\x6f\x6a\x4a\xe1\x2d\x54\xac\x6e\xf7\x8d\xf7\xe8\x1e\xc3\x05\x53\xb1\xd0\x3b\x7b\x0f\x8b\x7c\xf4\xf3\xcf\xdf\xa4\x16\x38\xff\xbe\x17\x6e\x3d\x2f\x3c\x65\xaa\x09\xf7\x8d\xff\x65\xc5\x0e\x5c\x5d\xa6\xf1\x2d\x1b\xce\xb2\xda\x7f\xa4\x5d\xbc\xc8\x30\x1a\xf4\xcd\xeb\x0f\xc4\x07\x18\x93\xc3\xd7\x0d\x3f\xb3\x36\x2e\x5f\xa1\x0b\x45\x0a\xef\xe3\x83\xea\x1c\x36\x64\xe1\x0d\x7c\x5b\x79\x1a\x8c\xc6\xf0\x06\xfe\x48\x5e\xaf\x4b\xfd\xed\x8f\x04\xbe\x6f\x67\xa1\x62\xf5\xda\xae\x5f\x4d\xc6\xb7\xef\x8f\xa6\xa2\xa3\xb8\x7b\x7c\xdf\x74\x97\x66\x70\x93\xce\x21\x49\x42\x00\x13\x8d\x73\x37\x5a\x9e\x80\x49\x3a\x18\x74\x29\x64\x4b\x0e\xeb\x41\x0d\xc9\xd3\xcb\xb8\xfa\xa6\x42\xd1\x85\x75\x33\x78\x5f\x07\x15\xab\x53\x78\xab\x01\xab\xda\x2d\xda\x8a\x87\x0a\x99\x26\x48\x7c\xec\xb5\x59\x56\xc9\xaa\xa1\x24\x85\xaf\xeb\xdc\xbe\x86\x7c\x0d\x78\x69\x0c\xf9\x81\xbb\x58\xe3\x15\xae\xec\xca\x3f\x7c\x30\x56\x42\x6d\x8c\xda\x23\x10\xe8\x37\x52\x0c\xb5\x77\xb8\x3b\x22\x9f\xba\x48\x36\xbf\xdc\x91\x14\xda\x93\x50\xe5\x99\x3f\x0c\x50\x64\x7e\x97\x29\xec\x0d\x7e\x72\x19\xe5\xe3\xca\x40\x95\x43\xd4\x81\x56\xa7\x3b\xf6\xe3\xe2\xe8\xb2\xd8\xdf\xa0\x7d\x53\xc2\x29\xca\xfc\xc1\x4d\xce\xb2\xfa\xb1\x39\x71\x77\x7d\x0b\xef\x3a\xc1\x90\xc1\xdf\x22\x83\x9e\x83\x6a\xdb\x9a\xbf\xa5\xd0\x3e\x58\xca\x9c\xb9\x47\xfd\xf8\xcc\x0e\x22\x23\x29\x62\x9f\x86\x5f\xe2\x79\xe8\x3f\x44\xc6\xcb\x50\x43\x3d\xe6\xc3\x94\x66\x7a\x71\xd0\x1e\xce\x68\x9d\xcc\x25\x67\x6e\xfd\x4b\x29\x8e\xd6\x51\x36\x65\x4a\x0a\xe9\x16\x59\x8d\x56\x1a\x91\x95\xa6\xd9\xb1\x4b\xfe\xd9\x4a\x7a\xf3\xfe\x79\x15\x36\xc5\x0a\xb6\xaf\xe0\xa8\xfd\xd4\xef\x2e\x5e\xbd\x3c\x1d\xaf\xc7\xc9\xb1\xe2\x07\x41\x61\x05\xc5\x52\xed\x0e\x87\xda\x9a\x9a\x15\xe1\xbe\x76\xa6\xfd\x7e\x23\x76\xd7\x0f\xf6\xd7\xd6\x43\x23\xf9\x18\x56\xa0\x78\xb7\x38\xbf\x36\xf7\xa6\x32\xfe\x3d\x99\x0c\x21\xb9\xb0\xe8\xf1\xdf\x2d\xce\x3f\x6b\x0a\xcd\x2d\x51\x24\x5f\xb6\x37\xa0\x9f\x23\x35\x6a\x91\xed\xd8\x39\x1f\xd9\x7d\xbb\x61\x1f\x1e\x44\x71\x10\x44\x3d\x30\x71\x08\xa8\xd6\x5b\x8b\x64\x1a\x1b\x26\xfc\x47\x59\x94\x2e\x7c\x93\x56\xe0\x10\xaa\x86\x5c\xf7\x56\x0e\x5b\x73\xb2\x00\xa6\x01\xb5\x18\xf9\x07\xcc\x63\x35\xb1\xe9\xb6\x6e\xd4\x46\xb1\xae\x9f\x96\x19\xce\x9d\x65\x59\xae\x76\xa5\xe6\xbd\xff\x1c\xc2\xe7\x50\xfb\x27\x4e\x48\x84\xef\xd5\xd1\x4a\xaf\x8e\x96\x80\xbb\x2a\x76\x67\x5e\xbe\x6c\x76\x2e\xb7\x8b\xda\x65\xfe\x01\xd0\x1d\x06\x8f\x34\xae\xd4\xa3\xee\x81\x5b\xfb\xd7\x49\xd4\x80\x16\x45\x1a\xbd\xab\x81\x9f\x70\x83\xc9\x42\x1b\x8b\xd9\xfc\xc5\xf8\x2c\xe3\x3a\xe3\x25\xf2\xfb\x5e\x2e\x57\x41\x10\x2e\x3e\x41\x90\x09\xbd\xe2\xb5\xd6\x1a\xe8\xb9\x44\xfe\x1f\x00\x00\xff\xff\xbd\xd8\x73\xf2\xb3\x17\x00\x00"),
 		},
 		"/terraform-modules/packet/flatcar-linux/kubernetes/versions.tf": &vfsgen۰CompressedFileInfo{
 			name:             "versions.tf",
diff --git a/pkg/components/contour/component.go b/pkg/components/contour/component.go
index 41feb681..be8ecb76 100644
--- a/pkg/components/contour/component.go
+++ b/pkg/components/contour/component.go
@@ -44,6 +44,11 @@ type component struct {
 	ServiceType      string            `hcl:"service_type,optional"`
 	Tolerations      []util.Toleration `hcl:"toleration,block"`
 	TolerationsRaw   string
+	Envoy            *envoy `hcl:"envoy,block"`
+}
+
+type envoy struct {
+	MetricsScrapeInterval string `hcl:"metrics_scrape_interval,optional"`
 }
 
 func newComponent() *component {
diff --git a/pkg/components/contour/manifest.go b/pkg/components/contour/manifest.go
index 398f8b03..553ec5f7 100644
--- a/pkg/components/contour/manifest.go
+++ b/pkg/components/contour/manifest.go
@@ -23,6 +23,9 @@ monitoring:
 
 envoy:
   serviceType: {{ .ServiceType }}
+  {{- if .Envoy }}
+  metricsScrapeInterval: {{ .Envoy.MetricsScrapeInterval }}
+  {{- end }}
 
 {{- if .NodeAffinity }}
 nodeAffinity:
diff --git a/pkg/platform/aws/aws.go b/pkg/platform/aws/aws.go
index 68c97f2b..cfc97c49 100644
--- a/pkg/platform/aws/aws.go
+++ b/pkg/platform/aws/aws.go
@@ -85,7 +85,6 @@ type config struct {
 	EnableTLSBootstrap       bool              `hcl:"enable_tls_bootstrap,optional"`
 	EncryptPodTraffic        bool              `hcl:"encrypt_pod_traffic,optional"`
 	IgnoreX509CNCheck        bool              `hcl:"ignore_x509_cn_check,optional"`
-	ConntrackMaxPerCore      int               `hcl:"conntrack_max_per_core,optional"`
 	KubeAPIServerExtraFlags  []string
 }
 
@@ -108,11 +107,10 @@ func (c *config) LoadConfig(configBody *hcl.Body, evalContext *hcl.EvalContext)
 
 func NewConfig() *config {
 	return &config{
-		Region:              "eu-central-1",
-		EnableAggregation:   true,
-		EnableTLSBootstrap:  true,
-		NetworkMTU:          platform.NetworkMTU,
-		ConntrackMaxPerCore: platform.ConntrackMaxPerCore,
+		Region:             "eu-central-1",
+		EnableAggregation:  true,
+		EnableTLSBootstrap: true,
+		NetworkMTU:         platform.NetworkMTU,
 	}
 }
 
@@ -285,14 +283,6 @@ func (c *config) checkValidConfig() hcl.Diagnostics {
 	diagnostics = append(diagnostics, c.checkNameSizes()...)
 	diagnostics = append(diagnostics, c.checkLBPortsUnique()...)
 
-	if c.ConntrackMaxPerCore < 0 {
-		diagnostics = append(diagnostics, &hcl.Diagnostic{
-			Severity: hcl.DiagError,
-			Summary:  "conntrack_max_per_core can't be negative value",
-			Detail:   fmt.Sprintf("'conntrack_max_per_core' value is %d", c.ConntrackMaxPerCore),
-		})
-	}
-
 	if c.OIDC != nil {
 		_, diags := c.OIDC.ToKubeAPIServerFlags(c.clusterDomain())
 		diagnostics = append(diagnostics, diags...)
diff --git a/pkg/platform/aws/template.go b/pkg/platform/aws/template.go
index fd8168a1..36c58b5f 100644
--- a/pkg/platform/aws/template.go
+++ b/pkg/platform/aws/template.go
@@ -104,8 +104,6 @@ module "aws-{{.Config.ClusterName}}" {
 
   ignore_x509_cn_check = {{.Config.IgnoreX509CNCheck}}
 
-  conntrack_max_per_core = {{.Config.ConntrackMaxPerCore}}
-
   worker_bootstrap_tokens = [
     {{- range $index, $pool := .Config.WorkerPools }}
     module.worker-pool-{{ $index }}.worker_bootstrap_token,
diff --git a/pkg/platform/baremetal/baremetal.go b/pkg/platform/baremetal/baremetal.go
index 744c430e..3c519940 100644
--- a/pkg/platform/baremetal/baremetal.go
+++ b/pkg/platform/baremetal/baremetal.go
@@ -57,7 +57,6 @@ type config struct {
 	EnableTLSBootstrap       bool              `hcl:"enable_tls_bootstrap,optional"`
 	EncryptPodTraffic        bool              `hcl:"encrypt_pod_traffic,optional"`
 	IgnoreX509CNCheck        bool              `hcl:"ignore_x509_cn_check,optional"`
-	ConntrackMaxPerCore      int               `hcl:"conntrack_max_per_core,optional"`
 	KubeAPIServerExtraFlags  []string
 }
 
@@ -88,12 +87,11 @@ func (c *config) Meta() platform.Meta {
 
 func NewConfig() *config {
 	return &config{
-		CachedInstall:       "false",
-		OSChannel:           "flatcar-stable",
-		OSVersion:           "current",
-		EnableTLSBootstrap:  true,
-		NetworkMTU:          platform.NetworkMTU,
-		ConntrackMaxPerCore: platform.ConntrackMaxPerCore,
+		CachedInstall:      "false",
+		OSChannel:          "flatcar-stable",
+		OSVersion:          "current",
+		EnableTLSBootstrap: true,
+		NetworkMTU:         platform.NetworkMTU,
 	}
 }
 
@@ -240,7 +238,6 @@ func createTerraformConfigFile(cfg *config, terraformPath string) error {
 		EnableTLSBootstrap       bool
 		EncryptPodTraffic        bool
 		IgnoreX509CNCheck        bool
-		ConntrackMaxPerCore      int
 	}{
 		CachedInstall:            cfg.CachedInstall,
 		ClusterName:              cfg.ClusterName,
@@ -266,7 +263,6 @@ func createTerraformConfigFile(cfg *config, terraformPath string) error {
 		EnableTLSBootstrap:       cfg.EnableTLSBootstrap,
 		EncryptPodTraffic:        cfg.EncryptPodTraffic,
 		IgnoreX509CNCheck:        cfg.IgnoreX509CNCheck,
-		ConntrackMaxPerCore:      cfg.ConntrackMaxPerCore,
 	}
 
 	if err := t.Execute(f, terraformCfg); err != nil {
@@ -280,14 +276,6 @@ func createTerraformConfigFile(cfg *config, terraformPath string) error {
 func (c *config) checkValidConfig() hcl.Diagnostics {
 	var diagnostics hcl.Diagnostics
 
-	if c.ConntrackMaxPerCore < 0 {
-		diagnostics = append(diagnostics, &hcl.Diagnostic{
-			Severity: hcl.DiagError,
-			Summary:  "conntrack_max_per_core can't be negative value",
-			Detail:   fmt.Sprintf("'conntrack_max_per_core' value is %d", c.ConntrackMaxPerCore),
-		})
-	}
-
 	if c.OIDC != nil {
 		_, diags := c.OIDC.ToKubeAPIServerFlags(c.K8sDomainName)
 		diagnostics = append(diagnostics, diags...)
diff --git a/pkg/platform/baremetal/template.go b/pkg/platform/baremetal/template.go
index a6d57327..09239e9c 100644
--- a/pkg/platform/baremetal/template.go
+++ b/pkg/platform/baremetal/template.go
@@ -68,8 +68,7 @@ module "bare-metal-{{.ClusterName}}" {
   }
   {{- end}}
 
-  ignore_x509_cn_check   = {{.IgnoreX509CNCheck}}
-  conntrack_max_per_core = {{.ConntrackMaxPerCore}}
+  ignore_x509_cn_check = {{.IgnoreX509CNCheck}}
 }
 
 terraform {
diff --git a/pkg/platform/packet/packet.go b/pkg/platform/packet/packet.go
index 7e03a83f..9a93d743 100644
--- a/pkg/platform/packet/packet.go
+++ b/pkg/platform/packet/packet.go
@@ -98,8 +98,6 @@ type config struct {
 	EncryptPodTraffic        bool              `hcl:"encrypt_pod_traffic,optional"`
 	IgnoreX509CNCheck        bool              `hcl:"ignore_x509_cn_check,optional"`
 	WorkerPools              []workerPool      `hcl:"worker_pool,block"`
-	ConntrackMaxPerCore      int               `hcl:"conntrack_max_per_core,optional"`
-
 	// Not exposed to the user
 	KubeAPIServerExtraFlags []string
 	NodesDependOn           []string
@@ -124,10 +122,9 @@ func (c *config) LoadConfig(configBody *hcl.Body, evalContext *hcl.EvalContext)
 
 func NewConfig() *config {
 	return &config{
-		EnableAggregation:   true,
-		EnableTLSBootstrap:  true,
-		NetworkMTU:          platform.NetworkMTU,
-		ConntrackMaxPerCore: platform.ConntrackMaxPerCore,
+		EnableAggregation:  true,
+		EnableTLSBootstrap: true,
+		NetworkMTU:         platform.NetworkMTU,
 	}
 }
 
@@ -444,14 +441,6 @@ func (c *config) checkValidConfig() hcl.Diagnostics {
 	diagnostics = append(diagnostics, c.checkReservationIDs()...)
 	diagnostics = append(diagnostics, c.validateOSVersion()...)
 
-	if c.ConntrackMaxPerCore < 0 {
-		diagnostics = append(diagnostics, &hcl.Diagnostic{
-			Severity: hcl.DiagError,
-			Summary:  "conntrack_max_per_core can't be negative value",
-			Detail:   fmt.Sprintf("'conntrack_max_per_core' value is %d", c.ConntrackMaxPerCore),
-		})
-	}
-
 	if c.OIDC != nil {
 		_, diags := c.OIDC.ToKubeAPIServerFlags(c.clusterDomain())
 		diagnostics = append(diagnostics, diags...)
diff --git a/pkg/platform/packet/template.go b/pkg/platform/packet/template.go
index c3c0ff5b..a1ec8de7 100644
--- a/pkg/platform/packet/template.go
+++ b/pkg/platform/packet/template.go
@@ -119,8 +119,6 @@ EOF
 
   ignore_x509_cn_check = {{.Config.IgnoreX509CNCheck}}
 
-  conntrack_max_per_core = {{.Config.ConntrackMaxPerCore}}
-
   worker_bootstrap_tokens = [
     {{- range $index, $pool := .Config.WorkerPools }}
     module.worker-{{$pool.Name}}.worker_bootstrap_token,
diff --git a/pkg/platform/platform.go b/pkg/platform/platform.go
index 8721518c..bd26756c 100644
--- a/pkg/platform/platform.go
+++ b/pkg/platform/platform.go
@@ -27,13 +27,8 @@ import (
 	"github.com/kinvolk/lokomotive/pkg/version"
 )
 
-const (
-	// NetworkMTU is the default host network MTU.
-	NetworkMTU = 1500
-
-	// ConntrackMaxPerCore is the default conntrack table size per core inherited from upstream kube-proxy.
-	ConntrackMaxPerCore = 32768
-)
+// NetworkMTU is the default host network MTU.
+const NetworkMTU = 1500
 
 // CommonControlPlaneCharts returns a list of control plane Helm charts to be deployed for all
 // platforms.


Test patch:
diff --git a/pkg/components/contour/component_test.go b/pkg/components/contour/component_test.go
index dde3d621..5244425c 100644
--- a/pkg/components/contour/component_test.go
+++ b/pkg/components/contour/component_test.go
@@ -17,6 +17,7 @@ package contour
 import (
 	"testing"
 
+	"github.com/kinvolk/lokomotive/pkg/components/internal/testutil"
 	"github.com/kinvolk/lokomotive/pkg/components/util"
 )
 
@@ -90,3 +91,39 @@ component "contour" {
 		}
 	}
 }
+
+func TestConversion(t *testing.T) {
+	testCases := []struct {
+		name                 string
+		inputConfig          string
+		expectedManifestName string
+		expected             string
+		jsonPath             string
+	}{
+		{
+			name: "default ServiceMonitor",
+			inputConfig: `component "contour" {
+				enable_monitoring = true
+				envoy {
+					metrics_scrape_interval = "10s"
+				}
+			}`,
+			expectedManifestName: "contour/templates/service-monitor.yaml",
+			jsonPath:             "{.spec.endpoints[0].interval}",
+			expected:             "10s",
+		},
+	}
+
+	for _, tc := range testCases {
+		tc := tc
+		t.Run(tc.name, func(t *testing.T) {
+			t.Parallel()
+
+			component := newComponent()
+			m := testutil.RenderManifests(t, component, name, tc.inputConfig)
+			gotConfig := testutil.ConfigFromMap(t, m, tc.expectedManifestName)
+
+			testutil.MatchJSONPathStringValue(t, gotConfig, tc.jsonPath, tc.expected)
+		})
+	}
+}
diff --git a/pkg/platform/aws/aws_internal_test.go b/pkg/platform/aws/aws_internal_test.go
index 7ab0200e..df34f886 100644
--- a/pkg/platform/aws/aws_internal_test.go
+++ b/pkg/platform/aws/aws_internal_test.go
@@ -167,58 +167,3 @@ func TestWorkerPoolPort(t *testing.T) {
 		}
 	}
 }
-
-func validConfig() *config {
-	return &config{
-		WorkerPools: []workerPool{
-			{
-				Name: "pool-1",
-			},
-		},
-	}
-}
-
-func TestConfigurationIsInvalidWhen(t *testing.T) {
-	cases := map[string]func(c *config){
-		"conntrack_max_per_core_is_negative": func(c *config) {
-			c.ConntrackMaxPerCore = -1
-		},
-	}
-
-	for n, c := range cases {
-		c := c
-
-		t.Run(n, func(t *testing.T) {
-			config := validConfig()
-
-			c(config)
-
-			if d := config.checkValidConfig(); !d.HasErrors() {
-				t.Fatalf("Validating configuration did not return expected error")
-			}
-		})
-	}
-}
-
-func TestConfigurationIsValidWhen(t *testing.T) {
-	cases := map[string]func(c *config){
-		"all_required_fields_are_set": func(c *config) {},
-		"conntrack_max_per_core_is_a_positive_value": func(c *config) {
-			c.ConntrackMaxPerCore = 10
-		},
-	}
-
-	for n, c := range cases {
-		c := c
-
-		t.Run(n, func(t *testing.T) {
-			config := validConfig()
-
-			c(config)
-
-			if d := config.checkValidConfig(); d.HasErrors() {
-				t.Fatalf("Validating configuration returned expected error: %v", d)
-			}
-		})
-	}
-}
diff --git a/pkg/platform/baremetal/baremetal_internal_test.go b/pkg/platform/baremetal/baremetal_internal_test.go
index 75d6fb11..850aa358 100644
--- a/pkg/platform/baremetal/baremetal_internal_test.go
+++ b/pkg/platform/baremetal/baremetal_internal_test.go
@@ -39,52 +39,3 @@ func TestCreateTerraformConfigFile(t *testing.T) {
 		t.Fatalf("creating Terraform config files should succeed, got: %v", err)
 	}
 }
-
-func validConfig() *config {
-	return &config{}
-}
-
-func TestConfigurationIsInvalidWhen(t *testing.T) {
-	cases := map[string]func(c *config){
-		"conntrack_max_per_core_is_negative": func(c *config) {
-			c.ConntrackMaxPerCore = -1
-		},
-	}
-
-	for n, c := range cases {
-		c := c
-
-		t.Run(n, func(t *testing.T) {
-			config := validConfig()
-
-			c(config)
-
-			if d := config.checkValidConfig(); !d.HasErrors() {
-				t.Fatalf("Validating configuration did not return expected error")
-			}
-		})
-	}
-}
-
-func TestConfigurationIsValidWhen(t *testing.T) {
-	cases := map[string]func(c *config){
-		"all_required_fields_are_set": func(c *config) {},
-		"conntrack_max_per_core_is_a_positive_value": func(c *config) {
-			c.ConntrackMaxPerCore = 10
-		},
-	}
-
-	for n, c := range cases {
-		c := c
-
-		t.Run(n, func(t *testing.T) {
-			config := validConfig()
-
-			c(config)
-
-			if d := config.checkValidConfig(); d.HasErrors() {
-				t.Fatalf("Validating configuration returned expected error: %v", d)
-			}
-		})
-	}
-}
diff --git a/pkg/platform/packet/packet_test.go b/pkg/platform/packet/packet_test.go
index 057710ef..3d15d99b 100644
--- a/pkg/platform/packet/packet_test.go
+++ b/pkg/platform/packet/packet_test.go
@@ -220,18 +220,6 @@ func TestCheckValidConfig(t *testing.T) {
 			},
 			expectError: true,
 		},
-		"negative_conntrack_max_per_core_is_invalid": {
-			mutateF: func(c *config) {
-				c.ConntrackMaxPerCore = -1
-			},
-			expectError: true,
-		},
-		"positive_conntrack_max_per_core_is_valid": {
-			mutateF: func(c *config) {
-				c.ConntrackMaxPerCore = 10
-			},
-			expectError: false,
-		},
 	}
 
 	for name, c := range cases {
diff --git a/test/system/clc_snippets_test.go b/test/system/clc_snippets_test.go
index 8eea9b2d..d9230d00 100644
--- a/test/system/clc_snippets_test.go
+++ b/test/system/clc_snippets_test.go
@@ -15,8 +15,7 @@
 // +build aws aws_edge packet
 // +build e2e
 
-//nolint:dupl
-package system_test
+package system //nolint:testpackage
 
 import (
 	"context"
diff --git a/test/system/conntrack_clc_test.go b/test/system/conntrack_clc_test.go
deleted file mode 100644
index b0cf1b95..00000000
--- a/test/system/conntrack_clc_test.go
+++ /dev/null
@@ -1,150 +0,0 @@
-// Copyright 2020 The Lokomotive Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-// +build aws
-// +build e2e
-
-//nolint:dupl
-package system_test
-
-import (
-	"context"
-	"fmt"
-	"testing"
-
-	appsv1 "k8s.io/api/apps/v1"
-	corev1 "k8s.io/api/core/v1"
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"sigs.k8s.io/yaml"
-
-	testutil "github.com/kinvolk/lokomotive/test/components/util"
-)
-
-// expectedConntrackMaxCLC is an expected value returned by
-// net.netfilter.nf_conntrack_max on nodes with 'conntrack-modified: true' label set.
-//
-// 50000 is arbitrary number close to 32768*2CPU on AWS machine type we're testing.
-// It's good if this value is not divisible by 32768 which is a default value in kube-proxy,
-// so it is easy to distinguish.
-const expectedConntrackMaxCLC = 50000
-
-// Define manifest as YAML and then unmarshal it to a Go struct so that it is easier to
-// write and debug, as it can be copy-pasted to a file and applied manually.
-const conntrackMaxCLCDSManifest = `apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  generateName: test-conntrack-
-spec:
-  selector:
-    matchLabels:
-      name: test-conntrack
-  template:
-    metadata:
-      labels:
-        name: test-conntrack
-    spec:
-      tolerations:
-      - key: node-role.kubernetes.io/master
-        effect: NoSchedule
-      terminationGracePeriodSeconds: 1
-      containers:
-      - name: test-conntrack
-        image: ubuntu
-        command: ["bash"]
-`
-
-func TestCLCSnippetWithConntrackSettingIsRespected(t *testing.T) {
-	t.Parallel()
-
-	namespace := "kube-system"
-
-	client := testutil.CreateKubeClient(t)
-
-	ds := &appsv1.DaemonSet{}
-	if err := yaml.Unmarshal([]byte(conntrackMaxCLCDSManifest), ds); err != nil {
-		t.Fatalf("failed unmarshaling manifest: %v", err)
-	}
-
-	// Set the right arguments from the manifest with the correct fileName.
-	ds.Spec.Template.Spec.Containers[0].Args = []string{
-		"-c",
-		fmt.Sprintf("test %d -eq $(sysctl net.netfilter.nf_conntrack_max | cut -d' ' -f3) && exec tail -f /dev/null",
-			expectedConntrackMaxCLC),
-	}
-	ds.Spec.Template.Spec.NodeSelector = map[string]string{"conntrack-modified": "true"}
-
-	ds, err := client.AppsV1().DaemonSets(namespace).Create(context.TODO(), ds, metav1.CreateOptions{})
-	if err != nil {
-		t.Fatalf("failed to create DaemonSet: %v", err)
-	}
-
-	testutil.WaitForDaemonSet(t, client, namespace, ds.ObjectMeta.Name, testutil.RetryInterval, testutil.Timeout)
-
-	t.Cleanup(func() {
-		if err := client.AppsV1().DaemonSets(namespace).Delete(
-			context.TODO(), ds.ObjectMeta.Name, metav1.DeleteOptions{}); err != nil {
-			t.Logf("failed to remove DaemonSet: %v", err)
-		}
-	})
-}
-
-func TestNodesWithoutCLCSnippetRetainDefaultConntrackMax(t *testing.T) {
-	t.Parallel()
-
-	namespace := "kube-system"
-
-	client := testutil.CreateKubeClient(t)
-
-	ds := &appsv1.DaemonSet{}
-	if err := yaml.Unmarshal([]byte(conntrackMaxCLCDSManifest), ds); err != nil {
-		t.Fatalf("failed unmarshaling manifest: %v", err)
-	}
-
-	// Set the right arguments from the manifest with the correct fileName.
-	ds.Spec.Template.Spec.Containers[0].Args = []string{
-		"-c",
-		fmt.Sprintf("test %d -ne $(sysctl net.netfilter.nf_conntrack_max | cut -d' ' -f3) && exec tail -f /dev/null",
-			expectedConntrackMaxCLC),
-	}
-	ds.Spec.Template.Spec.Affinity = &corev1.Affinity{
-		NodeAffinity: &corev1.NodeAffinity{
-			RequiredDuringSchedulingIgnoredDuringExecution: &corev1.NodeSelector{
-				NodeSelectorTerms: []corev1.NodeSelectorTerm{
-					{
-						MatchExpressions: []corev1.NodeSelectorRequirement{
-							{
-								Key:      "conntrack-modified",
-								Operator: corev1.NodeSelectorOpDoesNotExist,
-							},
-						},
-					},
-				},
-			},
-		},
-	}
-
-	ds, err := client.AppsV1().DaemonSets(namespace).Create(context.TODO(), ds, metav1.CreateOptions{})
-	if err != nil {
-		t.Fatalf("failed to create DaemonSet: %v", err)
-	}
-
-	testutil.WaitForDaemonSet(t, client, namespace, ds.ObjectMeta.Name, testutil.RetryInterval, testutil.Timeout)
-
-	t.Cleanup(func() {
-		if err := client.AppsV1().DaemonSets(namespace).Delete(
-			context.TODO(), ds.ObjectMeta.Name, metav1.DeleteOptions{}); err != nil {
-			t.Logf("failed to remove DaemonSet: %v", err)
-		}
-	})
-}
diff --git a/test/system/conntrack_global_test.go b/test/system/conntrack_global_test.go
deleted file mode 100644
index dfb68444..00000000
--- a/test/system/conntrack_global_test.go
+++ /dev/null
@@ -1,97 +0,0 @@
-// Copyright 2020 The Lokomotive Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-// +build packet,baremetal
-// +build e2e
-
-//nolint:dupl
-package system_test
-
-import (
-	"context"
-	"fmt"
-	"testing"
-
-	appsv1 "k8s.io/api/apps/v1"
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"sigs.k8s.io/yaml"
-
-	testutil "github.com/kinvolk/lokomotive/test/components/util"
-)
-
-// expectedConntrackMaxGlobal is an expected value returned by
-// net.netfilter.nf_conntrack_max on nodes with 'conntrack-modified: true' label set.
-//
-// 65000 is arbitrary number which is not divisible by 32768 which is a default value in kube-proxy,
-// so it is easy to distinguish.
-const expectedConntrackMaxGlobal = 65000
-
-// Define manifest as YAML and then unmarshal it to a Go struct so that it is easier to
-// write and debug, as it can be copy-pasted to a file and applied manually.
-const conntrackMaxGlobalDSManifest = `apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  generateName: test-conntrack-
-spec:
-  selector:
-    matchLabels:
-      name: test-conntrack
-  template:
-    metadata:
-      labels:
-        name: test-conntrack
-    spec:
-      tolerations:
-      - key: node-role.kubernetes.io/master
-        effect: NoSchedule
-      terminationGracePeriodSeconds: 1
-      containers:
-      - name: test-conntrack
-        image: ubuntu
-        command: ["bash"]
-`
-
-func TestGlobalConntrackSettingIsRespectedOnAllNodes(t *testing.T) {
-	t.Parallel()
-
-	namespace := "kube-system"
-
-	client := testutil.CreateKubeClient(t)
-
-	ds := &appsv1.DaemonSet{}
-	if err := yaml.Unmarshal([]byte(conntrackMaxGlobalDSManifest), ds); err != nil {
-		t.Fatalf("failed unmarshaling manifest: %v", err)
-	}
-
-	// Set the right arguments from the manifest with the correct fileName.
-	ds.Spec.Template.Spec.Containers[0].Args = []string{
-		"-c",
-		fmt.Sprintf("test %d -eq $(sysctl net.netfilter.nf_conntrack_max | cut -d' ' -f3) && exec tail -f /dev/null",
-			expectedConntrackMaxGlobal),
-	}
-
-	ds, err := client.AppsV1().DaemonSets(namespace).Create(context.TODO(), ds, metav1.CreateOptions{})
-	if err != nil {
-		t.Fatalf("failed to create DaemonSet: %v", err)
-	}
-
-	testutil.WaitForDaemonSet(t, client, namespace, ds.ObjectMeta.Name, testutil.RetryInterval, testutil.Timeout)
-
-	t.Cleanup(func() {
-		if err := client.AppsV1().DaemonSets(namespace).Delete(
-			context.TODO(), ds.ObjectMeta.Name, metav1.DeleteOptions{}); err != nil {
-			t.Logf("failed to remove DaemonSet: %v", err)
-		}
-	})
-}
diff --git a/test/system/ssh_keys_test.go b/test/system/ssh_keys_test.go
index 990e4c5f..4da00b1f 100644
--- a/test/system/ssh_keys_test.go
+++ b/test/system/ssh_keys_test.go
@@ -15,7 +15,7 @@
 // +build aws aws_edge baremetal packet
 // +build e2e
 
-package system_test
+package system //nolint:testpackage
 
 import (
 	"context"