feat(calico_operator): install before prime check as networking is required

prime ready check relies on networking, the operator is required for this

!17

tasks/k3s/install.yaml

@@ -289,6 +289,22 @@
   when: kubernetes_config.cluster.prime.name == inventory_hostname
 
 
+- name: Install Calico Operator
+  ansible.builtin.include_tasks:
+    file: migrate_to_operator.yaml
+    apply:
+      tags:
+        - always
+  when: >-
+    (
+      'operator_migrate_calico' in ansible_run_tags
+        or
+      'operator_calico' in ansible_run_tags
+    )
+      and
+    kubernetes_config.cluster.prime.name == inventory_hostname
+
+
 - name: Wait for kubernetes prime to be ready
   ansible.builtin.shell:
     cmd: |
@@ -329,22 +345,6 @@
     kubernetes_olm_install | default(false) | bool
 
 
-- name: Install Calico Operator
-  ansible.builtin.include_tasks:
-    file: migrate_to_operator.yaml
-    apply:
-      tags:
-        - always
-  when: >-
-    (
-      'operator_migrate_calico' in ansible_run_tags
-        or
-      'operator_calico' in ansible_run_tags
-    )
-      and
-    kubernetes_config.cluster.prime.name == inventory_hostname
-
-
 - name: Enable Cluster Encryption
   ansible.builtin.command:
     cmd: kubectl patch felixconfiguration default --type='merge' -p '{"spec":{"wireguardEnabled":true,"wireguardEnabledV6":true}}'