adrien/ansible-role-kubernetes
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Fix k3s deployment
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Adrien Reslinger 2021-01-27 00:08:51 +01:00
parent 884df14b6e
commit 52a8de84bc
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
3 changed files with 87 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

7
templates/etc/firewalld/services/kubernetes.xml.j2
View file

@ -9,6 +9,12 @@
{% if kubernetes_master == true %}
# Kubernetes API server, used by all
<port protocol="tcp" port="6443"/>
{% endif %}
{% if kubernetes_cri == "k3s" %}
# K3S with flannel and wireguard
<port protocol="udp" port="51820"/>
{% else %}
{% if kubernetes_master == true %}
# etcd server client API, used by kube-apiserver and etcd
<port protocol="tcp" port="2379"/>
<port protocol="tcp" port="2380"/>
@ -35,4 +41,5 @@
<port protocol="udp" port="6783-6784"/>
<port protocol="tcp" port="6783"/>
{% endif %}
{% endif %}
</service>

6
templates/etc/systemd/system/k3s.service.j2
View file

@ -7,7 +7,11 @@ After=network-online.target
Type=notify
EnvironmentFile=/etc/systemd/system/k3s.service.env
{% if kubernetes_master|bool %}
ExecStart=/usr/local/bin/k3s server --flannel-backend=wireguard --disable traefik --secrets-encryption
{% if vars['KubernetesMasterConfigured_' ~ kubernetes_cluster_name] is not defined %}
ExecStart=/usr/local/bin/k3s server --flannel-backend=wireguard --disable traefik --secrets-encryption --cluster-init
{% else %}
ExecStart=/usr/local/bin/k3s server --flannel-backend=wireguard --disable traefik --secrets-encryption --server https://{{ kubernetes_master }}:6443 --token ${NODE_TOKEN}
{% endif %}
{% else %}
ExecStart=/usr/local/bin/k3s agent --server https://{{ kubernetes_master }}:6443 --token ${NODE_TOKEN}
{% endif %}