Force apply manifests w/ handler;Add dependency

ansible/roles/firstboot/files/ansible_payload/playbook.yml

@@ -14,3 +14,9 @@
     - workloadcluster
     - tty
     - cleanup
+  handlers:
+    - name: Apply manifests
+      kubernetes.core.k8s:
+        src: "{{ item }}"
+        state: present
+      with_fileglob: /var/lib/rancher/k3s/server/manifests/*.yaml

ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/main.yml

@@ -34,6 +34,11 @@
                 services:
                 - kind: TraefikService
                   name: api@internal
+      notify:
+        - Apply manifests
+
+    - name: Trigger handlers
+      ansible.builtin.meta: flush_handlers
 
     - name: Ensure API availability
       ansible.utils.cli_parse:
@@ -137,6 +142,11 @@
   ansible.builtin.template:
     dest: /etc/rancher/k3s/registries.yaml
     src: registries.j2
+  notify:
+    - Apply manifests
+
+- name: Trigger handlers
+  ansible.builtin.meta: flush_handlers
 
 - block:
 
@@ -169,6 +179,11 @@
                 services:
                 - name: gitea-ssh
                   port: 22
+      notify:
+        - Apply manifests
+
+    - name: Trigger handlers
+      ansible.builtin.meta: flush_handlers
 
     - name: Ensure gitea API availability
       ansible.utils.cli_parse:
@@ -338,6 +353,11 @@
           namespace: argo-cd
           uid: "{{ lookup('ansible.builtin.password', '/dev/null length=5 chars=ascii_lowercase,digits seed=inventory_hostname') }}"
           privatekey: "{{ lookup('ansible.builtin.file', '~/.ssh/git_rsa_id') | indent(4, true) }}"
+      notify:
+        - Apply manifests
+
+    - name: Trigger handlers
+      ansible.builtin.meta: flush_handlers
 
   module_defaults:
     ansible.builtin.uri: