fix(config): ensure join token is included in config

!11 nofusscomputing/infrastructure/configuration-management/project-production!5
This commit is contained in:
2023-11-26 23:10:08 +09:30
parent 4ce5f37223
commit 301ed9ad3f
2 changed files with 22 additions and 17 deletions

View File

@ -206,6 +206,23 @@
# kubernetes_config.cluster.prime.name == inventory_hostname # kubernetes_config.cluster.prime.name == inventory_hostname
- name: Fetch Join Token
ansible.builtin.slurp:
src: /var/lib/rancher/k3s/server/token
delegate_to: "{{ kubernetes_config.cluster.prime.name }}"
run_once: true
register: k3s_join_token
no_log: true # Value is sensitive
- name: Create Token fact
ansible.builtin.set_fact:
k3s_join_token: "{{ k3s_join_token.content | b64decode | replace('\n', '') }}"
delegate_to: "{{ kubernetes_config.cluster.prime.name }}"
run_once: true
no_log: true # Value is sensitive
- name: Copy Intial required templates - name: Copy Intial required templates
ansible.builtin.template: ansible.builtin.template:
src: "{{ item.src }}" src: "{{ item.src }}"
@ -307,23 +324,6 @@
kubernetes_config.cluster.networking.encrypt | default(false) | bool kubernetes_config.cluster.networking.encrypt | default(false) | bool
- name: Fetch Join Token
ansible.builtin.slurp:
src: /var/lib/rancher/k3s/server/token
delegate_to: "{{ kubernetes_config.cluster.prime.name }}"
run_once: true
register: k3s_join_token
no_log: true # Value is sensitive
- name: Create Token fact
ansible.builtin.set_fact:
k3s_join_token: "{{ k3s_join_token.content | b64decode | replace('\n', '') }}"
delegate_to: "{{ kubernetes_config.cluster.prime.name }}"
run_once: true
no_log: true # Value is sensitive
- name: Install K3s (master nodes) - name: Install K3s (master nodes)
ansible.builtin.shell: ansible.builtin.shell:
cmd: | cmd: |

View File

@ -72,4 +72,9 @@ server: {% for cluster_node in groups[kubernetes_config.cluster.group_name] -%}
{% if Kubernetes_Master | default(false) | bool -%} {% if Kubernetes_Master | default(false) | bool -%}
servicelb-namespace: {{ kubernetes_config.cluster.networking.service_load_balancer_namespace | default('kube-system') }} servicelb-namespace: {{ kubernetes_config.cluster.networking.service_load_balancer_namespace | default('kube-system') }}
service-cidr: "{{ KubernetesServiceSubnet }}" service-cidr: "{{ KubernetesServiceSubnet }}"
agent-token: {{ k3s_join_token }}
{% endif %} {% endif %}
{% if not Kubernetes_Master | default(false) | bool -%}
token: {{ k3s_join_token }}
{% endif %}