# TODO

- [upgrade metallb helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L5)
- [use ./values/metallb.yaml for this](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L13)
- [upgrade nginx helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L28)
- [upgrade cert-manager helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L39)
- [use ./values/cert-manager.yaml for this](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L45)
- [upgrade prometheus stack helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L56)
- [upgrade longhorn helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L67)
- [upgrade vault helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L78)
- [HA Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L84)
- [Auto unseal Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L85)
- [automatic ingress and tunnel for all services](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L88)
- [(optimize) DRY master and worker definition](../infra/platform/cluster.tf#L87)
- [bug](../infra/platform/cluster.tf#L97)
- [remote backend (etcd or minio)](../infra/platform/terraform.tf#L2)
- [convert to YAML for Terraform yamldecode](../metal/hosts.ini#L1)
- [Optimize SELinux](../metal/roles/lxd/tasks/main.yml#L1)
- [Optimize firewall](../metal/roles/lxd/tasks/main.yml#L6)
- [change to /var/lib/lxd/server.crt after https](../metal/roles/lxd/tasks/main.yml#L26)
- [(optimize) use template for tfvars](../metal/roles/lxd/tasks/main.yml#L38)
- [use btrfs in k8s 1.19.8 https](../metal/roles/lxd/templates/leader.yaml.j2#L17)
- [investigate why --noconfirm is not working](../tools/Dockerfile#L3)