Bootstrap provisioner-k8s

1. Create Incus instance

   # Create Incus VM (not container)
   incus create images:ubuntu/24.04 provisioner-k8s --vm
   
   # Set max memory to 7GiB
   incus config set provisioner-k8s limits.memory 7GiB
   
   # Set cpu cores to 4
   incus config set provisioner-k8s limits.cpu 4
   
   # Set storage to 50GiB
   incus config device override provisioner-k8s root size=50GiB
   
   # Start!
   incus start provisioner-k8s
   

2. Run Ansible playbook with local inventory

   ```bash
   task provisioner-k8s:provision:local
   ```
   

3. Validate if host can now be provisioned through Tailscale

   task provisioner-k8s:provision
   

4. Copy Kubernetes secret /etc/rancher/k3s/k3s.yaml into 1Password op://vgijssel-prod/provisioner-k8s-kubeconfig/certificate

5. Modify server url to https://provisioner-k8s.tail2c33e2.ts.net:6443

6. Update devenv secrets

   task devenv:secrets