Add Flatcar and Cilium kube-proxy-free architecture

terraform/cloud-cluster/README.md

@@ -1,10 +1,10 @@
 # Optional production-style path
 
-This directory provisions one encrypted Ubuntu EC2 host with a deliberately
+This directory provisions one encrypted Flatcar EC2 host with a deliberately
 small network surface. It is a scaffold for the documented cloud path; the
 local k3d path remains the primary, cost-free portfolio demo.
 
-The AWS account, region, AMI, SSH key pair, and administrator CIDR are inputs,
+The AWS account, region, Flatcar AMI, SSH key pair, and administrator CIDR are inputs,
 not repository values. Do not commit a real `terraform.tfvars` file or private
 keys. The security group intentionally exposes SSH and the Kubernetes API only
 to `admin_cidr`; add any public application ports explicitly when needed.
@@ -21,7 +21,7 @@ terraform apply
 terraform output -raw public_ip
 ```
 
-Then run `ansible/bootstrap-k3s.yml` against the output IP. `terraform destroy`
+Then run `ansible/bootstrap-k3s.yml` against the output IP. Configure the
+Cilium API endpoint before installing Cilium. `terraform destroy`
 removes the lab resources when finished. This path is not required for the
 portfolio demo and is not invoked by CI.
-

terraform/cloud-cluster/terraform.tfvars.example

@@ -3,5 +3,4 @@ availability_zone = null
 instance_type    = "t3.medium"
 ssh_key_name     = "replace-with-existing-key-pair"
 admin_cidr       = "203.0.113.10/32"
-ami_id           = "replace-with-ubuntu-22.04-ami-for-your-region"
-
+ami_id           = "replace-with-flatcar-stable-ami-for-your-region"

terraform/cloud-cluster/variables.tf

@@ -27,7 +27,6 @@ variable "admin_cidr" {
 }
 
 variable "ami_id" {
-  description = "Ubuntu 22.04 LTS AMI ID for the selected region."
+  description = "Flatcar Stable AMI ID for the selected region and architecture."
   type        = string
 }
-