Bootstrap initial repo state

ansible/roles/k8s_host/tasks/main.yml

@@ -0,0 +1,19 @@
+- name: Ensure base packages
+  apt:
+    name: [curl, jq, gnupg, ca-certificates]
+    state: present
+    update_cache: yes
+
+- name: Install Helm if missing
+  shell: |
+    if ! command -v helm >/dev/null 2>&1; then
+      curl -fsSL https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
+    fi
+  args:
+    executable: /bin/bash
+
+- name: Ensure kube config dir
+  file:
+    path: /root/.kube
+    state: directory
+    mode: "0700"