Improved security, Calico as an extra cni of choice, Gvisor added for additional layer of isolation.

[tzago]

Hi Tim,

A big fan here.

Hey I added some extra security enhancements and and option to choose what CNI to deploy instead of the Flannel as default.
Calico as CNI has some extra advantages over Flannel like network policy and more.

Added Encryption to secrets and also an option to add Gvisor that provides an additional layer of isolation between running applications and the host operating system.

Let me know if you want me to share a pull request.

This fork: https://github.com/tzago/k3s-ansible

Thanks!