refactor(node_labels): removed from config.yaml and set to be a manifest on prime node

this also removes the restriction of not being able to set `node-role` label.

!10 nofusscomputing/infrastructure/configuration-management/project-production!4
This commit is contained in:
2023-11-19 16:06:01 +09:30
parent c41e12544b
commit 58a95e6781
2 changed files with 22 additions and 11 deletions

View File

@ -33,3 +33,24 @@
- src: iptables-kubernetes.rules.j2
dest: "/etc/iptables.rules.d/iptables-kubernetes.rules"
notify: firewall_reloader
- name: Add Kubernetes Node Labels
ansible.builtin.copy:
content: |-
apiVersion: v1
kind: Node
metadata:
name: "{{ inventory_hostname }}"
labels:
{{ item | to_nice_yaml | indent(4) }}
dest: /var/lib/rancher/k3s/server/manifests/node-manifest-{{ inventory_hostname }}.yaml
owner: root
group: root
mode: '700'
delegate_to: "{{ kubernetes_config.cluster.prime.name }}"
with_items:
- "{{ kubernetes_config.hosts[inventory_hostname].labels }}"
when:
- ( kubernetes_config.hosts[inventory_hostname].labels is defined and
kubernetes_config.hosts[inventory_hostname].labels|default('')|length > 0 )

View File

@ -20,6 +20,7 @@ cluster-init: true
disable-network-policy: true
disable:
- traefik
- metrics-server
etcd-snapshot-retention: {{ kubernetes_etcd_snapshot_retention | int }}
etcd-snapshot-schedule-cron: "{{ kubernetes_etcd_snapshot_cron_schedule }}"
flannel-backend: none
@ -41,17 +42,6 @@ kubelet-arg:
- system-reserved=cpu={{ kubelet_arg_system_reserved_cpu }},memory={{ kubelet_arg_system_reserved_memory }},ephemeral-storage={{ kubelet_arg_system_reserved_storage }}
{% if host_external_ip | default('') %}node-external-ip: "{{ host_external_ip }}"{% endif %}
{% if
kubernetes_config.hosts[inventory_hostname].labels is defined
and
kubernetes_config.hosts[inventory_hostname].labels | default([]) | list | length > 0
-%}
node-label: {%- for node_label in kubernetes_config.hosts[inventory_hostname].labels | dict2items +%}
- {{ node_label.key }}={{ node_label.value }}
{%- endfor %}
{%- endif %}
{% if not Kubernetes_Prime | default(false) | bool -%}
server: https://{{ hostvars[kubernetes_config.cluster.prime.name].ansible_host }}:6443
{%- endif %}