First release
This commit is contained in:
parent
9e428fabef
commit
84e5bbaf1a
10 changed files with 129 additions and 0 deletions
2
defaults/main.yml
Normal file
2
defaults/main.yml
Normal file
|
|
@ -0,0 +1,2 @@
|
||||||
|
---
|
||||||
|
crio_debug: false
|
||||||
4
handlers/main.yml
Normal file
4
handlers/main.yml
Normal file
|
|
@ -0,0 +1,4 @@
|
||||||
|
---
|
||||||
|
- name: Restart cri-o
|
||||||
|
service: name=cri-o state=restarted
|
||||||
|
|
||||||
4
meta/main.yml
Normal file
4
meta/main.yml
Normal file
|
|
@ -0,0 +1,4 @@
|
||||||
|
#---
|
||||||
|
#dependencies:
|
||||||
|
# - { role: yumrepo }
|
||||||
|
# - { role: yum }
|
||||||
102
tasks/main.yml
Normal file
102
tasks/main.yml
Normal file
|
|
@ -0,0 +1,102 @@
|
||||||
|
---
|
||||||
|
- name: Include vars for {{ ansible_os_family }}
|
||||||
|
include_vars: "{{ ansible_os_family }}.yml"
|
||||||
|
|
||||||
|
- name: Configuring kernel module to be load on boot
|
||||||
|
template:
|
||||||
|
src: "etc/modules-load.d/{{ item }}.conf.j2"
|
||||||
|
dest: "/etc/modules-load.d/{{ item }}.conf"
|
||||||
|
group: root
|
||||||
|
owner: root
|
||||||
|
mode: 0644
|
||||||
|
with_items:
|
||||||
|
- "br_netfilter"
|
||||||
|
- "overlay"
|
||||||
|
|
||||||
|
- name: Load kernel module
|
||||||
|
modprobe:
|
||||||
|
name: "{{ item }}"
|
||||||
|
state: present
|
||||||
|
with_items:
|
||||||
|
- br_netfilter
|
||||||
|
- overlay
|
||||||
|
|
||||||
|
- sysctl:
|
||||||
|
name: "{{ item }}"
|
||||||
|
value: "1"
|
||||||
|
sysctl_file: /etc/sysctl.d/99-kubernetes-cri.conf
|
||||||
|
reload: yes
|
||||||
|
with_items:
|
||||||
|
- "net.bridge.bridge-nf-call-iptables"
|
||||||
|
- "net.ipv4.ip_forward"
|
||||||
|
- "net.bridge.bridge-nf-call-ip6tables"
|
||||||
|
|
||||||
|
- name: Install dnf-plugins-core package
|
||||||
|
package:
|
||||||
|
name: dnf-plugins-core
|
||||||
|
state: latest
|
||||||
|
- name: Add container-selinux repository
|
||||||
|
command:
|
||||||
|
cmd: dnf -y copr enable rhcontainerbot/container-selinux
|
||||||
|
creates: /etc/yum.repos.d/_copr:copr.fedorainfracloud.org:rhcontainerbot:container-selinux.repo
|
||||||
|
warn: no
|
||||||
|
- name: Install container-selinux GPG key
|
||||||
|
command: rpm --import https://download.copr.fedorainfracloud.org/results/rhcontainerbot/container-selinux/pubkey.gpg
|
||||||
|
|
||||||
|
- name: Registering libcontainers repository
|
||||||
|
get_url:
|
||||||
|
url: https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/CentOS_8/devel:kubic:libcontainers:stable.repo
|
||||||
|
dest: /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: 0644
|
||||||
|
- name: Install libcontainers GPG key
|
||||||
|
command: rpm --import http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/CentOS_8/repodata/repomd.xml.key
|
||||||
|
|
||||||
|
- name: Registering CRI-O 1.18 repository
|
||||||
|
get_url:
|
||||||
|
url: http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/1.18:/1.18.0/CentOS_8/devel:kubic:libcontainers:stable:cri-o:1.18:1.18.0.repo
|
||||||
|
dest: /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:1.18:1.18.0.repo
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: 0644
|
||||||
|
- name: Install CRI-O GPG key
|
||||||
|
command: rpm --import http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/1.18:/1.18.0/CentOS_8/repodata/repomd.xml.key
|
||||||
|
|
||||||
|
- name: Install cri-o
|
||||||
|
package:
|
||||||
|
update_cache: yes
|
||||||
|
|
||||||
|
- name: Install cri-o
|
||||||
|
package:
|
||||||
|
name: "{{ crio_package_name }}"
|
||||||
|
state: latest
|
||||||
|
notify: Restart cri-o
|
||||||
|
|
||||||
|
- name: Enable cri-o on boot
|
||||||
|
service:
|
||||||
|
name: cri-o
|
||||||
|
state: started
|
||||||
|
enabled: yes
|
||||||
|
|
||||||
|
|
||||||
|
- name: Ensuring /etc/crio/crio.conf.d folder exists
|
||||||
|
file:
|
||||||
|
path: "/etc/crio/crio.conf.d"
|
||||||
|
state: "directory"
|
||||||
|
group: root
|
||||||
|
owner: root
|
||||||
|
mode: 0755
|
||||||
|
|
||||||
|
- name: Configuring cri-o
|
||||||
|
template:
|
||||||
|
src: "etc/crio/crio.conf.d/{{ item }}.j2"
|
||||||
|
dest: "/etc/crio/crio.conf.d/{{ item }}"
|
||||||
|
group: root
|
||||||
|
owner: root
|
||||||
|
mode: 0644
|
||||||
|
with_items:
|
||||||
|
- "01-cgroup-manager.conf"
|
||||||
|
- "01-log-level.conf"
|
||||||
|
- "01-metrics.conf"
|
||||||
|
notify: Restart containerd
|
||||||
2
templates/etc/crio/crio.conf.d/01-cgroup-manager.conf.j2
Normal file
2
templates/etc/crio/crio.conf.d/01-cgroup-manager.conf.j2
Normal file
|
|
@ -0,0 +1,2 @@
|
||||||
|
[crio.runtime]
|
||||||
|
cgroup_manager = "systemd"
|
||||||
2
templates/etc/crio/crio.conf.d/01-log-level.conf.j2
Normal file
2
templates/etc/crio/crio.conf.d/01-log-level.conf.j2
Normal file
|
|
@ -0,0 +1,2 @@
|
||||||
|
[crio.runtime]
|
||||||
|
log_level = "info"
|
||||||
8
templates/etc/crio/crio.conf.d/01-metrics.conf.j2
Normal file
8
templates/etc/crio/crio.conf.d/01-metrics.conf.j2
Normal file
|
|
@ -0,0 +1,8 @@
|
||||||
|
# A necessary configuration for Prometheus based metrics retrieval
|
||||||
|
[crio.metrics]
|
||||||
|
|
||||||
|
# Globally enable or disable metrics support.
|
||||||
|
enable_metrics = true
|
||||||
|
|
||||||
|
# The port on which the metrics server will listen.
|
||||||
|
metrics_port = 9090
|
||||||
1
templates/etc/modules-load.d/br_netfilter.conf.j2
Normal file
1
templates/etc/modules-load.d/br_netfilter.conf.j2
Normal file
|
|
@ -0,0 +1 @@
|
||||||
|
br_netfilter
|
||||||
1
templates/etc/modules-load.d/overlay.conf.j2
Normal file
1
templates/etc/modules-load.d/overlay.conf.j2
Normal file
|
|
@ -0,0 +1 @@
|
||||||
|
overlay
|
||||||
3
vars/RedHat.yml
Normal file
3
vars/RedHat.yml
Normal file
|
|
@ -0,0 +1,3 @@
|
||||||
|
---
|
||||||
|
crio_package_name:
|
||||||
|
- cri-o
|
||||||
Loading…
Add table
Add a link
Reference in a new issue