Ansible
Playbooks and roles that bootstrap the non-Talos hosts in the homelab — Docker hosts, the K3s mini-server cluster, and any Linux box that doesn't ship with an immutable OS.
Playbooks and roles that bootstrap the non-Talos hosts in the homelab — Docker hosts, the K3s mini-server cluster, and any Linux box that doesn't ship with an immutable OS.
Ansible role that turns a clean Linux host into a hardened Docker engine target — used to provision the Docker hosts that run outside Kubernetes.
The IaC + cluster-bootstrap layer that turns hardware and the network fabric into a running Kubernetes cluster — Proxmox, Hetzner, Talos, K3s, Flux, OpenTofu, Ansible.
Who owns what between OpenTofu (everything outside Kubernetes), Ansible (mutable hosts), Talos machine config (the nodes themselves), and Crossplane (external resources whose lifecycle belongs to an app namespace) — and where the handoff boundaries between the four layers sit.