we need to move cloud controller manager into kube-system, else the...

we need to move cloud controller manager into kube-system, else the cis-profile wont allow it to host mount

roles/rke2/templates/config.yaml.j2

@@ -73,6 +73,10 @@ tls-san:
 resolv-conf: "{{ resolv_conf_node }}"
 {% endif %}
 
+
+{% if secrets_encryption is defined %}
+secrets-encryption: "{{ secrets_encryption }}"
+{% endif %}
 {# Do not use it:
 
 {% if node_external_ip is defined %}

roles/rke2/templates/kernel_params.conf.j2

 vm.overcommit_memory=1
 kernel.panic=10
-kernel.panic_on_oops=1
+kernel.panic_on_oops=1
\ No newline at end of file
+protect-kernel-defaults=true
\ No newline at end of file

roles/rke2/templates/manifests/deploy-openstack-ccm.j2

@@ -3,7 +3,7 @@
 kind: Namespace
 apiVersion: v1
 metadata:
-  name: openstack-system
+  name: kube-system
 
 ---
 
@@ -18,7 +18,7 @@ spec:
   chart: openstack-cloud-controller-manager
   version: {{ item.value.version | default("1.3.0") }}
   bootstrap: True
-  targetNamespace: openstack-system
+  targetNamespace: kube-system
   valuesContent: |-
     cloudConfig:
       global: