fix cilium routing and cluster dns

ansible/roles/cilium_bootstrap/tasks/main.yml

@@ -1,4 +1,17 @@
 ---
+- name: Discover the k3d API server port from the active kubeconfig
+  ansible.builtin.raw: >-
+    awk -F: '/server:/{print $4; exit}' /home/{{ k3d_user }}/.kube/config
+  become_user: "{{ k3d_user }}"
+  register: cilium_discovered_api_port
+  changed_when: false
+  when: cilium_k8s_service_port | int == 0
+
+- name: Use the discovered k3d API server port
+  ansible.builtin.set_fact:
+    cilium_k8s_service_port: "{{ cilium_discovered_api_port.stdout | trim }}"
+  when: cilium_k8s_service_port | int == 0
+
 - name: Require a reachable Kubernetes API endpoint
   ansible.builtin.assert:
     that:
@@ -46,3 +59,14 @@
     {{ k3d_tool_dir }}/kubectl -n {{ cilium_namespace }} rollout status
     daemonset/cilium --timeout=300s
   become_user: "{{ k3d_user }}"
+
+- name: Verify all Kubernetes nodes become Ready after Cilium starts
+  ansible.builtin.raw: "{{ k3d_tool_dir }}/kubectl get nodes --no-headers"
+  become_user: "{{ k3d_user }}"
+  register: cilium_ready_nodes
+  changed_when: false
+  retries: 18
+  delay: 10
+  until:
+    - cilium_ready_nodes.rc == 0
+    - cilium_ready_nodes.stdout is search(' Ready ')