add Ansible Flatcar and platform bootstrap

ansible/roles/argocd_bootstrap/defaults/main.yml

@@ -0,0 +1,6 @@
+---
+argocd_enabled: true
+argocd_namespace: argocd
+argocd_install_manifest_url: https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.8/manifests/install.yaml
+argocd_root_application_manifest: "{{ k3d_workspace }}/deployments/argocd/app-of-apps.yaml"
+argocd_rollout_timeout: 300s

ansible/roles/argocd_bootstrap/tasks/main.yml

@@ -0,0 +1,32 @@
+---
+- name: Create ArgoCD namespace
+  ansible.builtin.raw: >-
+    {{ k3d_tool_dir }}/kubectl create namespace {{ argocd_namespace }}
+    --dry-run=client -o yaml | {{ k3d_tool_dir }}/kubectl apply -f -
+  become_user: "{{ k3d_user }}"
+  changed_when: false
+
+- name: Install pinned ArgoCD manifest
+  ansible.builtin.raw: >-
+    {{ k3d_tool_dir }}/kubectl apply --server-side --force-conflicts
+    -n {{ argocd_namespace }} -f {{ argocd_install_manifest_url }}
+  become_user: "{{ k3d_user }}"
+
+- name: Wait for ArgoCD server
+  ansible.builtin.raw: >-
+    {{ k3d_tool_dir }}/kubectl -n {{ argocd_namespace }} rollout status
+    deployment/argocd-server --timeout={{ argocd_rollout_timeout }}
+  become_user: "{{ k3d_user }}"
+
+- name: Apply the GitOps root Application
+  ansible.builtin.raw: "{{ k3d_tool_dir }}/kubectl apply -f {{ argocd_root_application_manifest }}"
+  become_user: "{{ k3d_user }}"
+
+- name: Verify root Application source path
+  ansible.builtin.raw: >-
+    {{ k3d_tool_dir }}/kubectl get application security-baseline-root
+    -n {{ argocd_namespace }} -o jsonpath={.spec.source.path}
+  become_user: "{{ k3d_user }}"
+  register: argocd_root_path
+  changed_when: false
+  failed_when: argocd_root_path.stdout | trim != 'deployments/argocd/apps'