move cert-manager and ingress-nginx from kubespray to separate modules, remove reset action and update observability template

kubespray/inventory/group_vars/all.yml

@@ -127,3 +127,8 @@ unsafe_show_logs: false
 
 ## If enabled it will allow kubespray to attempt setup even if the distribution is not supported. For unsupported distributions this can lead to unexpected failures in some cases.
 allow_unsupported_distribution_setup: false
+
+## Containerd settings
+# containerd_metadata_root_dir: /app/lib/containerd
+# The state directory for containerd
+# containerd_state_dir: /app/run/containerd