Fix k3s deployment
This commit is contained in:
parent
43353b130b
commit
6772711145
1 changed files with 17 additions and 6 deletions
|
|
@ -2,8 +2,9 @@
|
||||||
- name: Install Wireguard
|
- name: Install Wireguard
|
||||||
ansible.builtin.include_role:
|
ansible.builtin.include_role:
|
||||||
name: wireguard
|
name: wireguard
|
||||||
# when:
|
when:
|
||||||
# - kubernetes_cni == "wireguard"
|
# - kubernetes_cni == "wireguard"
|
||||||
|
- "'Vpn' not in group_names"
|
||||||
|
|
||||||
- name: Import Rancher key
|
- name: Import Rancher key
|
||||||
ansible.builtin.rpm_key:
|
ansible.builtin.rpm_key:
|
||||||
|
|
@ -126,6 +127,16 @@
|
||||||
when:
|
when:
|
||||||
- kubernetes_server|bool
|
- kubernetes_server|bool
|
||||||
|
|
||||||
|
- name: /etc/kubernetes directory
|
||||||
|
ansible.builtin.file:
|
||||||
|
path: "/etc/kubernetes"
|
||||||
|
state: directory
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: 0755
|
||||||
|
when:
|
||||||
|
- kubernetes_master|bool
|
||||||
|
|
||||||
- name: Configure Pod Security
|
- name: Configure Pod Security
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: "etc/kubernetes/psa.yaml"
|
src: "etc/kubernetes/psa.yaml"
|
||||||
|
|
@ -199,21 +210,21 @@
|
||||||
- name: Deploy Network Policies
|
- name: Deploy Network Policies
|
||||||
ansible.builtin.template:
|
ansible.builtin.template:
|
||||||
src: "{{ item }}.j2"
|
src: "{{ item }}.j2"
|
||||||
dest: "{{ item }}"
|
dest: "/{{ item }}"
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
mode: 0600
|
mode: 0600
|
||||||
with_items:
|
with_items:
|
||||||
- "var/lib/rancher/k3s/server/manifests/np-00-intra-namespace.yaml.j2"
|
- "var/lib/rancher/k3s/server/manifests/np-00-intra-namespace.yaml"
|
||||||
- "var/lib/rancher/k3s/server/manifests/np-01-default-network-dns-policy.yaml.j2"
|
- "var/lib/rancher/k3s/server/manifests/np-01-default-network-dns-policy.yaml"
|
||||||
- "var/lib/rancher/k3s/server/manifests/np-03-metrics-server-traefik.yaml.j2"
|
- "var/lib/rancher/k3s/server/manifests/np-03-metrics-server-traefik.yaml"
|
||||||
when:
|
when:
|
||||||
- kubernetes_master|bool
|
- kubernetes_master|bool
|
||||||
|
|
||||||
- name: Deploy systemd service
|
- name: Deploy systemd service
|
||||||
ansible.builtin.template:
|
ansible.builtin.template:
|
||||||
src: "{{ item }}.j2"
|
src: "{{ item }}.j2"
|
||||||
dest: "{{ item }}"
|
dest: "/{{ item }}"
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
mode: 0600
|
mode: 0600
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue