apiVersion: kops/v1alpha1
kind: Cluster
metadata:
  creationTimestamp: "2017-01-01T00:00:00Z"
  name: private.example.com
spec:
  api:
    loadBalancer:
      type: Public
  channel: stable
  cloudProvider: aws
  configBase: memfs://tests/private.example.com
  etcdClusters:
  - etcdMembers:
    - name: us-test-1a
      zone: us-test-1a
    name: main
  - etcdMembers:
    - name: us-test-1a
      zone: us-test-1a
    name: events
  kubernetesVersion: v1.4.7
  masterPublicName: api.private.example.com
  networkCIDR: 172.20.0.0/16
  networking:
    kopeio: {}
  nonMasqueradeCIDR: 100.64.0.0/10
  topology:
    bastion:
      enable: true
      name: bastion.private.example.com
    dns:
      type: Public
    masters: private
    nodes: private
  zones:
  - cidr: 172.20.0.0/22
    name: us-test-1a
    privateCIDR: 172.20.32.0/19

---

apiVersion: kops/v1alpha1
kind: InstanceGroup
metadata:
  creationTimestamp: "2017-01-01T00:00:00Z"
  name: bastions
spec:
  associatePublicIp: true
  image: kope.io/k8s-1.4-debian-jessie-amd64-hvm-ebs-2016-10-21
  machineType: t2.micro
  maxSize: 1
  minSize: 1
  role: Bastion
  zones:
  - utility-us-test-1a

---

apiVersion: kops/v1alpha1
kind: InstanceGroup
metadata:
  creationTimestamp: "2017-01-01T00:00:00Z"
  name: master-us-test-1a
spec:
  associatePublicIp: true
  image: kope.io/k8s-1.4-debian-jessie-amd64-hvm-ebs-2016-10-21
  machineType: m3.medium
  maxSize: 1
  minSize: 1
  role: Master
  zones:
  - us-test-1a

---

apiVersion: kops/v1alpha1
kind: InstanceGroup
metadata:
  creationTimestamp: "2017-01-01T00:00:00Z"
  name: nodes
spec:
  associatePublicIp: true
  image: kope.io/k8s-1.4-debian-jessie-amd64-hvm-ebs-2016-10-21
  machineType: t2.medium
  maxSize: 2
  minSize: 2
  role: Node
  zones:
  - us-test-1a