feat: moderate the k8s install

- only install a base config
- wait for 3 masters before deploying helm charts
- remove cluster-domain
- manage nginx ingres via rke2 helmconfig
- fix container version for ceph

modules/rke2/files/ceph-csi-rbdplugin.yaml

@@ -136,13 +136,7 @@ spec:
         - name: keys-tmp-dir
           emptyDir:
             medium: Memory
-        - name: oidc-token
-          projected:
-            sources:
-              - serviceAccountToken:
-                path: oidc-token
-                expirationSeconds: 3607
-                audience: ceph-csi-kms
+
 ---
 apiVersion: v1
 kind: Service