This commit is contained in:
parent
48e99ac551
commit
d4dac488f9
7 changed files with 298 additions and 279 deletions
|
|
@ -1,6 +1,6 @@
|
|||
---
|
||||
- name: Install Wireguard
|
||||
include_role:
|
||||
ansible.builtin.include_role:
|
||||
name: wireguard
|
||||
# when:
|
||||
# - kubernetes_cni == "wireguard"
|
||||
|
|
@ -13,7 +13,7 @@
|
|||
- ansible_os_family == "RedHat"
|
||||
|
||||
- name: Install the k3s-selinux rpm from a remote repo for yum distro
|
||||
yum:
|
||||
ansible.builtin.yum:
|
||||
name: "https://github.com/k3s-io/k3s-selinux/releases/download/v1.2.stable.2/k3s-selinux-1.2-2.el7.noarch.rpm"
|
||||
state: present
|
||||
when:
|
||||
|
|
@ -22,7 +22,7 @@
|
|||
- ansible_distribution_major_version == '7'
|
||||
|
||||
- name: Install the k3s-selinux rpm from a remote repo for dnf distro
|
||||
dnf:
|
||||
ansible.builtin.dnf:
|
||||
name: "https://github.com/k3s-io/k3s-selinux/releases/download/v1.2.stable.2/k3s-selinux-1.2-2.el8.noarch.rpm"
|
||||
state: present
|
||||
when:
|
||||
|
|
@ -31,13 +31,14 @@
|
|||
- ansible_distribution_major_version == '8'
|
||||
|
||||
- name: Check if /usr/local/bin/k3s already existe
|
||||
stat:
|
||||
ansible.builtin.stat:
|
||||
path: /usr/local/bin/k3s
|
||||
register: k3s_bin
|
||||
check_mode: false
|
||||
changed_when: False
|
||||
|
||||
- name: retreive k3s binary for x86_64
|
||||
get_url:
|
||||
- name: Retreive k3s binary for x86_64
|
||||
ansible.builtin.get_url:
|
||||
url: "https://github.com/rancher/k3s/releases/download/v1.25.3%2Bk3s1/k3s"
|
||||
dest: "/usr/local/bin/k3s"
|
||||
group: root
|
||||
|
|
@ -47,8 +48,8 @@
|
|||
- not k3s_bin.stat.exists
|
||||
- ansible_machine == "x86_64"
|
||||
|
||||
- name: retreive k3s binary for arm64
|
||||
get_url:
|
||||
- name: Retreive k3s binary for arm64
|
||||
ansible.builtin.get_url:
|
||||
url: "https://github.com/rancher/k3s/releases/download/v1.25.3%2Bk3s1/k3s-arm64"
|
||||
dest: "/usr/local/bin/k3s"
|
||||
group: root
|
||||
|
|
@ -58,8 +59,8 @@
|
|||
- not k3s_bin.stat.exists
|
||||
- ansible_machine == "arm64"
|
||||
|
||||
- name: retreive k3s binary for armv6/armv7
|
||||
get_url:
|
||||
- name: Retreive k3s binary for armv6/armv7
|
||||
ansible.builtin.get_url:
|
||||
url: "https://github.com/rancher/k3s/releases/download/v1.25.3%2Bk3s1/k3s-armhf"
|
||||
dest: "/usr/local/bin/k3s"
|
||||
group: root
|
||||
|
|
@ -70,7 +71,7 @@
|
|||
- (ansible_machine == "armv7l") or (ansible_machine == "armv6l")
|
||||
|
||||
- name: Create tools link
|
||||
file:
|
||||
ansible.builtin.file:
|
||||
src: "k3s"
|
||||
dest: "/usr/local/bin/{{ item }}"
|
||||
owner: root
|
||||
|
|
@ -82,7 +83,7 @@
|
|||
- "ctr"
|
||||
|
||||
- name: Create thin volumes for k3s
|
||||
lvol:
|
||||
community.general.lvol:
|
||||
vg: "{{ item.vg }}"
|
||||
lv: "{{ item.name }}"
|
||||
thinpool: kubernetes
|
||||
|
|
@ -90,15 +91,15 @@
|
|||
with_items:
|
||||
- { name: var_lib_k3s, vg: vg_sys, size: 10g, mount_point: /var/lib/rancher/k3s, mount_opts: "discard"}
|
||||
|
||||
- name: create file system on containerd lv
|
||||
filesystem:
|
||||
- name: Create file system on containerd lv
|
||||
community.general.filesystem:
|
||||
fstype: ext4
|
||||
dev: "/dev/{{ item.vg }}/{{ item.name }}"
|
||||
with_items:
|
||||
- { name: var_lib_k3s, vg: vg_sys, size: 10g, mount_point: /var/lib/rancher/k3s, mount_opts: "discard"}
|
||||
|
||||
- name: mount logical volumes
|
||||
mount:
|
||||
- name: Mount logical volumes
|
||||
ansible.posix.mount:
|
||||
name: "{{ item.mount_point }}"
|
||||
src: "/dev/{{ item.vg }}/{{ item.name }}"
|
||||
fstype: ext4
|
||||
|
|
@ -108,7 +109,7 @@
|
|||
- { name: var_lib_k3s, vg: vg_sys, size: 10g, mount_point: /var/lib/rancher/k3s, mount_opts: "discard"}
|
||||
|
||||
- name: Audit policies directory
|
||||
file:
|
||||
ansible.builtin.file:
|
||||
path: "/etc/kubernetes/policies"
|
||||
state: directory
|
||||
owner: root
|
||||
|
|
@ -118,7 +119,7 @@
|
|||
- kubernetes_master|bool
|
||||
|
||||
- name: Configure audit policy
|
||||
copy:
|
||||
ansible.builtin.copy:
|
||||
src: "etc/kubernetes/policies/audit-policy.yaml"
|
||||
dest: "/etc/kubernetes/policies/audit-policy.yaml"
|
||||
group: root
|
||||
|
|
@ -129,16 +130,18 @@
|
|||
|
||||
# Check controlers
|
||||
- name: Check if /etc/rancher/k3s/k3s.yaml already existe
|
||||
stat:
|
||||
ansible.builtin.stat:
|
||||
path: /etc/rancher/k3s/k3s.yaml
|
||||
register: st
|
||||
check_mode: false
|
||||
changed_when: False
|
||||
when:
|
||||
- kubernetes_master|bool
|
||||
|
||||
- name: Create KubernetesMasterConfigured group
|
||||
group_by:
|
||||
ansible.builtin.group_by:
|
||||
key: KubernetesMasterConfigured_{{ kubernetes_cluster_name }}
|
||||
check_mode: false
|
||||
when:
|
||||
- kubernetes_master|bool
|
||||
- st.stat.exists
|
||||
|
|
@ -148,7 +151,7 @@
|
|||
# run_once: true
|
||||
block:
|
||||
- name: Deploy systemd service
|
||||
template:
|
||||
ansible.builtin.template:
|
||||
src: "{{ item }}.j2"
|
||||
dest: "{{ item }}"
|
||||
owner: root
|
||||
|
|
@ -166,7 +169,7 @@
|
|||
daemon_reload: true
|
||||
|
||||
- name: Enable k3s on boot
|
||||
service:
|
||||
ansible.builtin.service:
|
||||
name: k3s
|
||||
state: started
|
||||
enabled: true
|
||||
|
|
@ -180,8 +183,9 @@
|
|||
path: /var/lib/rancher/k3s/server/token
|
||||
|
||||
- name: Add {{ ansible_hostname }} to KubernetesMasterConfigured group
|
||||
group_by:
|
||||
ansible.builtin.group_by:
|
||||
key: KubernetesMasterConfigured_{{ kubernetes_cluster_name }}
|
||||
check_mode: false
|
||||
|
||||
when:
|
||||
- kubernetes_master|bool
|
||||
|
|
@ -191,23 +195,23 @@
|
|||
|
||||
# Manque kubernetes_server_token, kubernetes_master url
|
||||
|
||||
#- name: Deploy systemd service
|
||||
# template:
|
||||
# src: "etc/systemd/system/{{ item }}.j2"
|
||||
# dest: "/etc/systemd/system/{{ item }}"
|
||||
# owner: root
|
||||
# group: root
|
||||
# mode: 0600
|
||||
# with_items:
|
||||
# - "k3s.service"
|
||||
# - "k3s.service.env"
|
||||
# when:
|
||||
# - ansible_service_mgr == "systemd"
|
||||
# - name: Deploy systemd service
|
||||
# ansible.builtin.template:
|
||||
# src: "etc/systemd/system/{{ item }}.j2"
|
||||
# dest: "/etc/systemd/system/{{ item }}"
|
||||
# owner: root
|
||||
# group: root
|
||||
# mode: 0600
|
||||
# with_items:
|
||||
# - "k3s.service"
|
||||
# - "k3s.service.env"
|
||||
# when:
|
||||
# - ansible_service_mgr == "systemd"
|
||||
|
||||
|
||||
|
||||
- name: Enable k3s on boot
|
||||
service:
|
||||
ansible.builtin.service:
|
||||
name: k3s
|
||||
state: started
|
||||
enabled: true
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue