move cert-manager and ingress-nginx from kubespray to separate modules, remove reset action and update observability template

kubespray/inventory/group_vars/all.yml

@@ -127,3 +127,8 @@ unsafe_show_logs: false
 
 ## If enabled it will allow kubespray to attempt setup even if the distribution is not supported. For unsupported distributions this can lead to unexpected failures in some cases.
 allow_unsupported_distribution_setup: false
+
+## Containerd settings
+# containerd_metadata_root_dir: /app/lib/containerd
+# The state directory for containerd
+# containerd_state_dir: /app/run/containerd

kubespray/project/cluster.yml

@@ -90,11 +90,7 @@
     - { role: kubernetes-apps/ingress_controller, tags: ingress-controller }
     - { role: kubernetes-apps/external_provisioner, tags: external-provisioner }
     - { role: kubernetes-apps, tags: apps }
-    - {
-        role: helm-apps,
-        when: "releases is defined and repositories is defined",
-        tags: helm-apps,
-      }
+    - { role: helm-apps, tags: helm-apps }
 
 - name: Apply resolv.conf changes now that cluster DNS is up
   hosts: k8s_cluster