| <aname="input_bastion_image"></a>[bastion\_image](#input\_bastion\_image) | Bastion OS: Image name | `string` | `"ubuntu-noble-x86_64"` | no |
| <aname="input_bastion_name"></a>[bastion\_name](#input\_bastion\_name) | Name of the bastion VM. Must match [a-zA-Z0-9-]+ regexp. | `string` | `"bastion-server"` | no |
| <aname="input_lb_kube_api_listener_port"></a>[lb\_kube\_api\_listener\_port](#input\_lb\_kube\_api\_listener\_port) | Listener port for kube-aip load balancer | `number` | `6443` | no |
| <aname="input_lb_kube_api_member_port"></a>[lb\_kube\_api\_member\_port](#input\_lb\_kube\_api\_member\_port) | Port number where kube-api listens. | `number` | `6443` | no |
| <aname="input_nodes_image"></a>[nodes\_image](#input\_nodes\_image) | Image used for both control and worker servers | `string` | `"ubuntu-noble-x86_64"` | no |
| <aname="input_public_external_network"></a>[public\_external\_network](#input\_public\_external\_network) | Cloud public external network pool | `string` | `"public-cesnet-195-113-167-GROUP"` | no |
| <aname="input_public_external_network"></a>[public\_external\_network](#input\_public\_external\_network) | Cloud public external network pool | `string` | `"external-ipv4-general-public"` | no |
| <aname="input_remove_rules"></a>[remove\_rules](#input\_remove\_rules) | List of default rule keys to be removed | `list(string)` | `[]` | no |
| <aname="input_router_creation_enable"></a>[router\_creation\_enable](#input\_router\_creation\_enable) | Create dedicated router instance. true/false ~ create new / reuse existing personal router | `bool` | `true` | no |