diff --git a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/certauthority.yml b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/certauthority.yml
index e2da602..82d4d91 100644
--- a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/certauthority.yml
+++ b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/certauthority.yml
@@ -117,7 +117,7 @@
               env:
                 - name: LEGO_CA_CERTIFICATES
                   value: /step-ca/root_ca.crt
-        marker: '    # {mark} ANSIBLE MANAGED BLOCK'
+        marker: '    # {mark} ANSIBLE MANAGED BLOCK [rootca]'
       notify:
         - Apply manifests
 
diff --git a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/ingress.yml b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/ingress.yml
index d66bd84..c668e3a 100644
--- a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/ingress.yml
+++ b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/ingress.yml
@@ -12,7 +12,7 @@
                     mountPath: /data
           persistence:
             enabled: true
-    marker: '    # {mark} ANSIBLE MANAGED BLOCK'
+    marker: '    # {mark} ANSIBLE MANAGED BLOCK [persistence]'
   notify:
     - Apply manifests
 
diff --git a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/k3s.yml b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/k3s.yml
index 9ce7bdb..842823b 100644
--- a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/k3s.yml
+++ b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/k3s.yml
@@ -72,3 +72,4 @@
       metadata:
         labels:
           vm_id: "{{ moref_id }}"
+    kubeconfig: "{{ kubeconfig.path }}"
diff --git a/ansible/roles/firstboot/files/ansible_payload/upgrade/roles/metacluster/tasks/k3s.yml b/ansible/roles/firstboot/files/ansible_payload/upgrade/roles/metacluster/tasks/k3s.yml
index 8e8f26c..858c7da 100644
--- a/ansible/roles/firstboot/files/ansible_payload/upgrade/roles/metacluster/tasks/k3s.yml
+++ b/ansible/roles/firstboot/files/ansible_payload/upgrade/roles/metacluster/tasks/k3s.yml
@@ -72,3 +72,4 @@
       metadata:
         labels:
           vm_id: "{{ moref_id }}"
+    kubeconfig: "{{ kubeconfig.path }}"