Formatting

Author: M4t7e

README.md

@@ -600,32 +600,6 @@ talos_backup_schedule = "0 * * * *"
 To recover from a snapshot, please refer to the Talos Disaster Recovery section in the [Documentation](https://www.talos.dev/latest/advanced/disaster-recovery/#recovery).
 </details>
 
-<!-- Talos Discovery Service -->
-<details>
-<summary><b>Talos Discovery Service</b></summary>
-
-Talos supports two node discovery mechanisms:
-
-- **Discovery Service Registry** (default): A public, external registry operated by Sidero Labs that works even when Kubernetes is unavailable. Nodes must have outbound access to TCP port 443 to communicate with it.  
-- **Kubernetes Registry**: Relies on Kubernetes Node metadata stored in etcd.
-
-This module uses the discovery service to perform additional health checks during Talos upgrades, Kubernetes upgrades, and Kubernetes manifest synchronization. If no discovery mechanism is enabled, these additional checks will be skipped.
-
-> :warning: **Important:** Kubernetes-based discovery is **incompatible by default** with Kubernetes **v1.32+** due to the `AuthorizeNodeWithSelectors` feature gate, which restricts access to Node metadata. This can cause broken discovery behavior, such as failing or incomplete results from `talosctl health` or `talosctl get members`.
-
-##### Example Configuration
-
-```hcl
-# Disable Kubernetes-based discovery (deprecated in Kubernetes >= 1.32)
-talos_kubernetes_discovery_service_enabled = false
-
-# Enable the external Sidero Labs discovery service (default)
-talos_siderolabs_discovery_service_enabled = true
-```
-
-For more details, refer to the [official Talos discovery guide](https://www.talos.dev/latest/talos-guides/discovery/).
-</details>
-
 <!-- Talos Bootstrap Manifests -->
 <details>
 <summary><b>Talos Bootstrap Manifests</b></summary>
@@ -708,6 +682,32 @@ talos_extra_inline_manifests = [
 
 </details>
 
+<!-- Talos Discovery Service -->
+<details>
+<summary><b>Talos Discovery Service</b></summary>
+
+Talos supports two node discovery mechanisms:
+
+- **Discovery Service Registry** (default): A public, external registry operated by Sidero Labs that works even when Kubernetes is unavailable. Nodes must have outbound access to TCP port 443 to communicate with it.  
+- **Kubernetes Registry**: Relies on Kubernetes Node metadata stored in etcd.
+
+This module uses the discovery service to perform additional health checks during Talos upgrades, Kubernetes upgrades, and Kubernetes manifest synchronization. If no discovery mechanism is enabled, these additional checks will be skipped.
+
+> :warning: **Important:** Kubernetes-based discovery is **incompatible by default** with Kubernetes **v1.32+** due to the `AuthorizeNodeWithSelectors` feature gate, which restricts access to Node metadata. This can cause broken discovery behavior, such as failing or incomplete results from `talosctl health` or `talosctl get members`.
+
+##### Example Configuration
+
+```hcl
+# Disable Kubernetes-based discovery (deprecated in Kubernetes >= 1.32)
+talos_kubernetes_discovery_service_enabled = false
+
+# Enable the external Sidero Labs discovery service (default)
+talos_siderolabs_discovery_service_enabled = true
+```
+
+For more details, refer to the [official Talos discovery guide](https://www.talos.dev/latest/talos-guides/discovery/).
+</details>
+
 <!-- Lifecycle -->
 ## :recycle: Lifecycle
 The [Talos Terraform Provider](https://registry.terraform.io/providers/siderolabs/talos) does not support declarative upgrades of Talos or Kubernetes versions. This module compensates for these limitations using `talosctl` to implement the required functionalities. Any minor or major upgrades to Talos and Kubernetes will result in a major version change of this module. Please be aware that downgrades are typically neither supported nor tested.

variables.tf

@@ -822,6 +822,7 @@ variable "talos_ccm_enabled" {
   default     = true
   description = "Enables the Talos Cloud Controller Manager (CCM) deployment."
 }
+
 variable "talos_ccm_version" {
   type        = string
   default     = "v1.9.1" # https://github.com/siderolabs/talos-cloud-controller-manager
@@ -875,6 +876,7 @@ variable "hcloud_ccm_enabled" {
   default     = true
   description = "Enables the Hetzner Cloud Controller Manager (CCM)."
 }
+
 variable "hcloud_ccm_helm_repository" {
   type        = string
   default     = "https://charts.hetzner.cloud"
@@ -970,6 +972,7 @@ variable "cilium_enabled" {
   default     = true
   description = "Enables the Cilium CNI deployment."
 }
+
 variable "cilium_helm_repository" {
   type        = string
   default     = "https://helm.cilium.io"
@@ -1394,6 +1397,7 @@ variable "prometheus_operator_crds_enabled" {
   default     = true
   description = "Enables the Prometheus Operator Custom Resource Definitions (CRDs) deployment."
 }
+
 variable "prometheus_operator_crds_version" {
   type        = string
   default     = "v0.82.1" # https://github.com/prometheus-operator/prometheus-operator