need debug

templates/kubeadm-config.yaml.j2

@@ -1,17 +1,10 @@
 apiVersion: kubeadm.k8s.io/v1beta2
 kind: InitConfiguration
-{% if true == false %}
+{% if kubetoken is defined %} %}
 bootstrapTokens:
-- token: "9a08jv.c0izixklcxtmnze7"
+- token: "{{ kubetoken.stdout }}"
   description: "kubeadm bootstrap token"
   ttl: "24h"
-- token: "783bde.3f89s0fje9f38fhf"
-  description: "another bootstrap token"
-  usages:
-  - authentication
-  - signing
-  groups:
-  - system:bootstrappers:kubeadm:default-node-token
 {% endif %}
 nodeRegistration:
 {% if  kubernetes_cri == "containerd" %}
@@ -27,9 +20,6 @@ nodeRegistration:
     effect: "NoSchedule"
 {% endif %}
   kubeletExtraArgs:
-{% if false %}
-    cgroupDriver: "cgroupfs"
-{% endif %}
 {% if  kubernetes_cri == "containerd" %}
     cgroup-driver: "systemd"
     container-runtime: "remote"
@@ -44,15 +34,40 @@ nodeRegistration:
   - IsPrivilegedUser
 {% endif %}
 localAPIEndpoint:
-  advertiseAddress: "{{ lbip_kubeapiserver }}"
+  advertiseAddress: "{{ ansible_host }}"
   bindPort: 6443
 {% if kubernetes_certificateKey is defined %}
-certificateKey: "{{ kubernetes_certificateKey }}"
+certificateKey: "{{ kubernetes_certificateKey.stdout }}"
+{% endif %}
+{% if kubecertskey is defined %}
+---
+apiVersion: kubeadm.k8s.io/v1beta2
+kind: JoinConfiguration
+controlPlane:
+  localAPIEndpoint:
+    advertiseAddress: "{{ ansible_host }}"
+    bindPort: 6443
+  certificateKey: "{{ kubecertskey.stdout }}"
+discovery:
+  bootstrapToken:
+    apiServerEndpoint: "{{ lb_kubemaster }}:6443"
+    caCertHashes:
+    - sha256:{{ cacerthash.stdout }} 
+    token: "{{ kubetoken.stdout }}"
+nodeRegistration:
+  kubeletExtraArgs:
+    node-ip: {{ ansible_host }}
+    read-only-port: "10255"
+  ignorePreflightErrors:
+  - SystemVerification
 {% endif %}
 ---
 apiVersion: kubeadm.k8s.io/v1beta1
 kind: ClusterConfiguration
 kubernetesVersion: stable
 controlPlaneEndpoint: "{{ lb_kubemaster }}:6443"
+apiServer:
+  certSANs:
+  - "{{ lbip_kubeapiserver }}"
 networking:
-   podSubnet: "10.244.0.0/16"
+  podSubnet: "10.244.0.0/16"