---
- name: python bootstrap
  hosts: k8s
  gather_facts: false
  become: true
  roles:
    - python-install
- name: ssh hardening
  hosts: k8s
  gather_facts: true
  become: true
  roles:
    - sshd
- name: configure control plane
  hosts: k8s_control
  gather_facts: true
  become: false
  roles:
    - k8s_control