refactor(tofu): template kubelet args

tofu/kubernetes/talos/config.tf

@@ -57,6 +57,7 @@ data "talos_machine_configuration" "this" {
       vip          = var.cluster.vip
     }), each.value.machine_type == "controlplane" ?
       templatefile("${path.module}/machine-config/control-plane.yaml.tftpl", {
+        kubelet = var.cluster.kubelet
         api_server = var.cluster.api_server
         inline_manifests = jsonencode(terraform_data.cilium_bootstrap_inline_manifests.output)
       }) : ""

tofu/kubernetes/talos/machine-config/control-plane.yaml.tftpl

@@ -1,8 +1,6 @@
 machine:
   kubelet:
-    extraArgs:
-      # Needed for Netbird agent https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls
-      allowed-unsafe-sysctls: net.ipv4.conf.all.src_valid_mark
+    ${indent(4, kubelet)}
 
 cluster:
   allowSchedulingOnControlPlanes: true

tofu/kubernetes/talos/variables.tf

@@ -23,6 +23,7 @@ variable "cluster" {
     talos_machine_config_version = optional(string)
     proxmox_cluster    = string
     kubernetes_version = string
+    kubelet = optional(string)
     api_server = optional(string)
     cilium = object({
       bootstrap_manifest_path = string

tofu/kubernetes/talos_cluster.auto.tfvars

@@ -17,6 +17,11 @@ talos_cluster_config = {
     bootstrap_manifest_path = "talos/inline-manifests/cilium-install.yaml"
     values_file_path        = "../../k8s/infra/network/cilium/values.yaml"
   }
+  kubelet = <<-EOT
+    extraArgs:
+      # Needed for Netbird agent https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls
+      allowed-unsafe-sysctls: net.ipv4.conf.all.src_valid_mark
+  EOT
   api_server = <<-EOT
     extraArgs:
       oidc-issuer-url: "https://authelia.stonegarden.dev"

tofu/kubernetes/variables.tf

@@ -39,6 +39,7 @@ variable "talos_cluster_config" {
     talos_machine_config_version = optional(string)
     proxmox_cluster    = string
     kubernetes_version = string
+    kubelet = optional(string)
     api_server = optional(string)
     cilium = object({
       bootstrap_manifest_path = string