refactor(tofu): template extraManifests in talos machine-config

tofu/kubernetes/talos/config.tf

@@ -58,6 +58,7 @@ data "talos_machine_configuration" "this" {
     }), each.value.machine_type == "controlplane" ?
       templatefile("${path.module}/machine-config/control-plane.yaml.tftpl", {
         kubelet = var.cluster.kubelet
+        extra_manifests = jsonencode(var.cluster.extra_manifests)
         api_server = var.cluster.api_server
         inline_manifests = jsonencode(terraform_data.cilium_bootstrap_inline_manifests.output)
       }) : ""

tofu/kubernetes/talos/machine-config/control-plane.yaml.tftpl

@@ -16,7 +16,5 @@ cluster:
     registries:
       service:
         disabled: false
-  extraManifests:
-    - https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.2.1/standard-install.yaml
-    - https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/v1.2.1/config/crd/experimental/gateway.networking.k8s.io_tlsroutes.yaml
+  extraManifests: ${extra_manifests}
   inlineManifests: ${inline_manifests}

tofu/kubernetes/talos/variables.tf

@@ -23,6 +23,7 @@ variable "cluster" {
     talos_machine_config_version = optional(string)
     proxmox_cluster    = string
     kubernetes_version = string
+    extra_manifests = optional(list(string))
     kubelet = optional(string)
     api_server = optional(string)
     cilium = object({

tofu/kubernetes/talos_cluster.auto.tfvars

@@ -17,7 +17,11 @@ talos_cluster_config = {
     bootstrap_manifest_path = "talos/inline-manifests/cilium-install.yaml"
     values_file_path        = "../../k8s/infra/network/cilium/values.yaml"
   }
-  kubelet = <<-EOT
+  extra_manifests = [
+    "https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.2.1/standard-install.yaml",
+    "https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/v1.2.1/config/crd/experimental/gateway.networking.k8s.io_tlsroutes.yaml"
+  ]
+  kubelet    = <<-EOT
     extraArgs:
       # Needed for Netbird agent https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls
       allowed-unsafe-sysctls: net.ipv4.conf.all.src_valid_mark

tofu/kubernetes/variables.tf

@@ -39,6 +39,7 @@ variable "talos_cluster_config" {
     talos_machine_config_version = optional(string)
     proxmox_cluster    = string
     kubernetes_version = string
+    extra_manifests = optional(list(string))
     kubelet = optional(string)
     api_server = optional(string)
     cilium = object({