this applies to - images - manifests - config files like registries, PSA configurations - rke2 installation dependencies see https://github.com/rancherfederal/rke2-ansible/blob/main/roles/rke2_server/tasks/add-pod-security-admission-config.yml for reference