---
- name: Bootstrap K3s control-plane node
  hosts: k3s_master
  become: true
  gather_facts: true

  vars:
    kubeconfig_output: /etc/rancher/k3s/k3s.yaml

  pre_tasks:
    - name: Assert control-plane requirements are satisfied
      assert:
        that:
          - ansible_os_family is defined
        fail_msg: "Host facts missing; ensure Ansible inventory is generated post-Terraform"

  roles:
    # TODO: add hardened OS baseline, container runtime prerequisites, and k3s installation role.
    - role: placeholder.k3s-master
      vars:
        kubeconfig_path: "{{ kubeconfig_output }}"