Fix k3s deployment

This commit is contained in:
Adrien Reslinger 2024-09-15 17:12:31 +02:00
parent 43353b130b
commit 6772711145
Signed by: adrien
GPG key ID: DA7B27055C66D6DE

View file

@ -2,8 +2,9 @@
- name: Install Wireguard - name: Install Wireguard
ansible.builtin.include_role: ansible.builtin.include_role:
name: wireguard name: wireguard
# when: when:
# - kubernetes_cni == "wireguard" # - kubernetes_cni == "wireguard"
- "'Vpn' not in group_names"
- name: Import Rancher key - name: Import Rancher key
ansible.builtin.rpm_key: ansible.builtin.rpm_key:
@ -126,6 +127,16 @@
when: when:
- kubernetes_server|bool - kubernetes_server|bool
- name: /etc/kubernetes directory
ansible.builtin.file:
path: "/etc/kubernetes"
state: directory
owner: root
group: root
mode: 0755
when:
- kubernetes_master|bool
- name: Configure Pod Security - name: Configure Pod Security
ansible.builtin.copy: ansible.builtin.copy:
src: "etc/kubernetes/psa.yaml" src: "etc/kubernetes/psa.yaml"
@ -199,21 +210,21 @@
- name: Deploy Network Policies - name: Deploy Network Policies
ansible.builtin.template: ansible.builtin.template:
src: "{{ item }}.j2" src: "{{ item }}.j2"
dest: "{{ item }}" dest: "/{{ item }}"
owner: root owner: root
group: root group: root
mode: 0600 mode: 0600
with_items: with_items:
- "var/lib/rancher/k3s/server/manifests/np-00-intra-namespace.yaml.j2" - "var/lib/rancher/k3s/server/manifests/np-00-intra-namespace.yaml"
- "var/lib/rancher/k3s/server/manifests/np-01-default-network-dns-policy.yaml.j2" - "var/lib/rancher/k3s/server/manifests/np-01-default-network-dns-policy.yaml"
- "var/lib/rancher/k3s/server/manifests/np-03-metrics-server-traefik.yaml.j2" - "var/lib/rancher/k3s/server/manifests/np-03-metrics-server-traefik.yaml"
when: when:
- kubernetes_master|bool - kubernetes_master|bool
- name: Deploy systemd service - name: Deploy systemd service
ansible.builtin.template: ansible.builtin.template:
src: "{{ item }}.j2" src: "{{ item }}.j2"
dest: "{{ item }}" dest: "/{{ item }}"
owner: root owner: root
group: root group: root
mode: 0600 mode: 0600