docs/hardening.md

@@ -71,6 +71,8 @@ kube_apiserver_admission_event_rate_limits:
     qps: 50
     burst: 100
 kube_profiling: false
+# Remove anonymous access to cluster
+remove_anonymous_access: true
 
 ## kube-controller-manager
 kube_controller_manager_bind_address: 127.0.0.1

roles/helm-apps/vars/main.yml

@@ -7,3 +7,4 @@ helm_defaults:
 
 helm_repository_defaults:
   binary_path: "{{ bin_dir }}/helm"
+  force_update: true

roles/reset/defaults/main.yml

@@ -11,7 +11,8 @@ reset_restart_network_service_name: >-
   {%- else -%}
   network
   {%- endif -%}
-  {%- elif ansible_distribution == "Ubuntu" -%}
+  {%- elif ansible_distribution == "Ubuntu"
+    or (ansible_distribution == "Debian" and ansible_distribution_major_version | int == 12 ) -%}
   systemd-networkd
   {%- elif ansible_os_family == "Debian" -%}
   networking