Update role
Some checks failed
continuous-integration/drone/push Build is failing

This commit is contained in:
Adrien Reslinger 2022-10-27 23:38:04 +02:00
parent 48e99ac551
commit d4dac488f9
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
7 changed files with 298 additions and 279 deletions

View file

@ -1,6 +1,6 @@
---
- name: Install Wireguard
include_role:
ansible.builtin.include_role:
name: wireguard
# when:
# - kubernetes_cni == "wireguard"
@ -13,7 +13,7 @@
- ansible_os_family == "RedHat"
- name: Install the k3s-selinux rpm from a remote repo for yum distro
yum:
ansible.builtin.yum:
name: "https://github.com/k3s-io/k3s-selinux/releases/download/v1.2.stable.2/k3s-selinux-1.2-2.el7.noarch.rpm"
state: present
when:
@ -22,7 +22,7 @@
- ansible_distribution_major_version == '7'
- name: Install the k3s-selinux rpm from a remote repo for dnf distro
dnf:
ansible.builtin.dnf:
name: "https://github.com/k3s-io/k3s-selinux/releases/download/v1.2.stable.2/k3s-selinux-1.2-2.el8.noarch.rpm"
state: present
when:
@ -31,13 +31,14 @@
- ansible_distribution_major_version == '8'
- name: Check if /usr/local/bin/k3s already existe
stat:
ansible.builtin.stat:
path: /usr/local/bin/k3s
register: k3s_bin
check_mode: false
changed_when: False
- name: retreive k3s binary for x86_64
get_url:
- name: Retreive k3s binary for x86_64
ansible.builtin.get_url:
url: "https://github.com/rancher/k3s/releases/download/v1.25.3%2Bk3s1/k3s"
dest: "/usr/local/bin/k3s"
group: root
@ -47,8 +48,8 @@
- not k3s_bin.stat.exists
- ansible_machine == "x86_64"
- name: retreive k3s binary for arm64
get_url:
- name: Retreive k3s binary for arm64
ansible.builtin.get_url:
url: "https://github.com/rancher/k3s/releases/download/v1.25.3%2Bk3s1/k3s-arm64"
dest: "/usr/local/bin/k3s"
group: root
@ -58,8 +59,8 @@
- not k3s_bin.stat.exists
- ansible_machine == "arm64"
- name: retreive k3s binary for armv6/armv7
get_url:
- name: Retreive k3s binary for armv6/armv7
ansible.builtin.get_url:
url: "https://github.com/rancher/k3s/releases/download/v1.25.3%2Bk3s1/k3s-armhf"
dest: "/usr/local/bin/k3s"
group: root
@ -70,7 +71,7 @@
- (ansible_machine == "armv7l") or (ansible_machine == "armv6l")
- name: Create tools link
file:
ansible.builtin.file:
src: "k3s"
dest: "/usr/local/bin/{{ item }}"
owner: root
@ -82,7 +83,7 @@
- "ctr"
- name: Create thin volumes for k3s
lvol:
community.general.lvol:
vg: "{{ item.vg }}"
lv: "{{ item.name }}"
thinpool: kubernetes
@ -90,15 +91,15 @@
with_items:
- { name: var_lib_k3s, vg: vg_sys, size: 10g, mount_point: /var/lib/rancher/k3s, mount_opts: "discard"}
- name: create file system on containerd lv
filesystem:
- name: Create file system on containerd lv
community.general.filesystem:
fstype: ext4
dev: "/dev/{{ item.vg }}/{{ item.name }}"
with_items:
- { name: var_lib_k3s, vg: vg_sys, size: 10g, mount_point: /var/lib/rancher/k3s, mount_opts: "discard"}
- name: mount logical volumes
mount:
- name: Mount logical volumes
ansible.posix.mount:
name: "{{ item.mount_point }}"
src: "/dev/{{ item.vg }}/{{ item.name }}"
fstype: ext4
@ -108,7 +109,7 @@
- { name: var_lib_k3s, vg: vg_sys, size: 10g, mount_point: /var/lib/rancher/k3s, mount_opts: "discard"}
- name: Audit policies directory
file:
ansible.builtin.file:
path: "/etc/kubernetes/policies"
state: directory
owner: root
@ -118,7 +119,7 @@
- kubernetes_master|bool
- name: Configure audit policy
copy:
ansible.builtin.copy:
src: "etc/kubernetes/policies/audit-policy.yaml"
dest: "/etc/kubernetes/policies/audit-policy.yaml"
group: root
@ -129,16 +130,18 @@
# Check controlers
- name: Check if /etc/rancher/k3s/k3s.yaml already existe
stat:
ansible.builtin.stat:
path: /etc/rancher/k3s/k3s.yaml
register: st
check_mode: false
changed_when: False
when:
- kubernetes_master|bool
- name: Create KubernetesMasterConfigured group
group_by:
ansible.builtin.group_by:
key: KubernetesMasterConfigured_{{ kubernetes_cluster_name }}
check_mode: false
when:
- kubernetes_master|bool
- st.stat.exists
@ -148,7 +151,7 @@
# run_once: true
block:
- name: Deploy systemd service
template:
ansible.builtin.template:
src: "{{ item }}.j2"
dest: "{{ item }}"
owner: root
@ -166,7 +169,7 @@
daemon_reload: true
- name: Enable k3s on boot
service:
ansible.builtin.service:
name: k3s
state: started
enabled: true
@ -180,8 +183,9 @@
path: /var/lib/rancher/k3s/server/token
- name: Add {{ ansible_hostname }} to KubernetesMasterConfigured group
group_by:
ansible.builtin.group_by:
key: KubernetesMasterConfigured_{{ kubernetes_cluster_name }}
check_mode: false
when:
- kubernetes_master|bool
@ -191,23 +195,23 @@
# Manque kubernetes_server_token, kubernetes_master url
#- name: Deploy systemd service
# template:
# src: "etc/systemd/system/{{ item }}.j2"
# dest: "/etc/systemd/system/{{ item }}"
# owner: root
# group: root
# mode: 0600
# with_items:
# - "k3s.service"
# - "k3s.service.env"
# when:
# - ansible_service_mgr == "systemd"
# - name: Deploy systemd service
# ansible.builtin.template:
# src: "etc/systemd/system/{{ item }}.j2"
# dest: "/etc/systemd/system/{{ item }}"
# owner: root
# group: root
# mode: 0600
# with_items:
# - "k3s.service"
# - "k3s.service.env"
# when:
# - ansible_service_mgr == "systemd"
- name: Enable k3s on boot
service:
ansible.builtin.service:
name: k3s
state: started
enabled: true