vault:
  k3s:
    server:
      sudo: ........