feat: moderate the k8s install

- only install a base config
- wait for 3 masters before deploying helm charts
- remove cluster-domain
- manage nginx ingres via rke2 helmconfig
- fix container version for ceph
- fix oidc mount

modules/rke2/files/ceph-csi-rbdplugin.yaml

@@ -136,7 +136,13 @@ spec:
         - name: keys-tmp-dir
           emptyDir:
             medium: Memory
-
+        - name: oidc-token
+          projected:
+            sources:
+              - serviceAccountToken:
+                path: oidc-token
+                expirationSeconds: 3607
+                audience: ceph-csi-kms
 ---
 apiVersion: v1
 kind: Service