domain: k8s.local
roles:
- ca
