Setup converge to do initial install of k3s and then switch over to unattended upgrades using the upgrade operator to prevent fighting over control over k3s version.
Things to consider:
1) Role still controls systems unit configuration
2) If the systemd unit changes the service needs to restart
3) The change detection should be reliable
4) The TLS SAN inclusion of privacy IPV6 address likely causes the unit to change every time, may need to use hostnames only for additional SANs
Setup converge to do initial install of k3s and then switch over to unattended upgrades using the upgrade operator to prevent fighting over control over k3s version.
Things to consider:
1) Role still controls systems unit configuration 2) If the systemd unit changes the service needs to restart 3) The change detection should be reliable 4) The TLS SAN inclusion of privacy IPV6 address likely causes the unit to change every time, may need to use hostnames only for additional SANs