We do the same at my current company. For common, core services on kubernetes clusters we use the terraform helm provider to install them.