This is the only way for me. I generally have one repo for Terraform to provision the k8s nodes, wherever they may live, and another with Ansible to provision t

This is the only way for me. I generally have one repo for Terraform to provision the k8s nodes, wherever they may live, and another with Ansible to provision the k8s services and some basic operators like observability stack for example. But now I'm moving more into using atomic server OS so I'm doing everything in one Terraform repo with ignition (or cloudinit).