--- - name: Include vars for {{ ansible_os_family }} include_vars: "{{ ansible_os_family }}.yml" - name: Configuring kernel module to be load on boot template: src: "etc/modules-load.d/{{ item }}.conf.j2" dest: "/etc/modules-load.d/{{ item }}.conf" group: root owner: root mode: 0644 with_items: - "br_netfilter" - "overlay" - name: Load kernel module modprobe: name: "{{ item }}" state: present with_items: - br_netfilter - overlay - name: Configure sysctl sysctl: name: "{{ item }}" value: "1" sysctl_file: /etc/sysctl.d/99-kubernetes-cri.conf reload: yes with_items: - "net.bridge.bridge-nf-call-iptables" - "net.ipv4.ip_forward" - "net.bridge.bridge-nf-call-ip6tables" - name: Install dnf-plugins-core package package: name: dnf-plugins-core state: present - name: Add container-selinux repository command: cmd: dnf -y copr enable rhcontainerbot/container-selinux creates: /etc/yum.repos.d/_copr:copr.fedorainfracloud.org:rhcontainerbot:container-selinux.repo warn: no - name: Install container-selinux GPG key command: cmd: rpm --import https://download.copr.fedorainfracloud.org/results/rhcontainerbot/container-selinux/pubkey.gpg warn: no - name: Registering libcontainers repository get_url: url: https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/CentOS_8/devel:kubic:libcontainers:stable.repo dest: /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo owner: root group: root mode: 0644 - name: Install libcontainers GPG key command: cmd: rpm --import http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/CentOS_8/repodata/repomd.xml.key warn: no - name: Registering CRI-O 1.18 repository get_url: url: http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/1.18:/1.18.0/CentOS_8/devel:kubic:libcontainers:stable:cri-o:1.18:1.18.0.repo dest: /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:1.18:1.18.0.repo owner: root group: root mode: 0644 - name: Install CRI-O GPG key command: cmd: rpm --import http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/1.18:/1.18.0/CentOS_8/repodata/repomd.xml.key warn: no - name: Update package manager list package: update_cache: yes - name: Install cri-o package package: name: "{{ crio_package_name }}" state: present notify: Restart cri-o - name: Ensuring /etc/crio/crio.conf.d folder exists file: path: "/etc/crio/crio.conf.d" state: "directory" group: root owner: root mode: 0755 - name: Configuring cri-o template: src: "etc/crio/crio.conf.d/{{ item }}.j2" dest: "/etc/crio/crio.conf.d/{{ item }}" group: root owner: root mode: 0644 with_items: - "01-crio-runtime.conf" - "01-cgroup-manager.conf" - "01-log-level.conf" - "01-metrics.conf" - "01-crio-network.conf" notify: Restart cri-o - name: Enable cri-o on boot service: name: cri-o state: restarted enabled: yes