gistfile1.txt

---
apiVersion: kind.x-k8s.io/v1alpha4
kind: Cluster
networking:
  # expose to private network
  apiServerAddress: "0.0.0.0"
  # fixed port so Vault auth backend can find the API
  apiServerPort: 32769
kubeadmConfigPatchesJSON6902:
- group: kubeadm.k8s.io
  kind: ClusterConfiguration
  # patch kubeadm config to add hostname as a SAN to the API server cert
  patch: |
      - op: add
        path: /apiServer/certSANs/-
        value: my-hostname
nodes:
- role: control-plane
  # mount docker config that can pull from private GCR
  extraMounts:
  - containerPath: /var/lib/kubelet/config.json
    hostPath: /var/lib/kind/docker-config.json