Jon
ce8143f52d
useful for setting up single node where if all nodes off except prime, targeting can be done !77 !78 !79 !80 nofusscomputing/infrastructure/configuration-management/project-production!58 nofusscomputing/infrastructure/configuration-management/inventory-infrastructure!4 nofusscomputing/infrastructure/configuration-management/templates-production!28
99 lines
2.4 KiB
YAML
99 lines
2.4 KiB
YAML
---
|
|
|
|
- name: Additional config files
|
|
ansible.builtin.copy:
|
|
content: |
|
|
{{ item.content }}
|
|
dest: "{{ item.path }}/{{ item.name }}"
|
|
mode: '740'
|
|
owner: root
|
|
group: root
|
|
loop: "{{ k3s.files }}"
|
|
when: item.when | default(false) | bool
|
|
|
|
|
|
- name: Check if FW dir exists
|
|
ansible.builtin.stat:
|
|
name: /etc/iptables-reloader/rules.d
|
|
register: firewall_rules_dir_metadata
|
|
|
|
|
|
- name: Copy Templates
|
|
ansible.builtin.template:
|
|
src: "{{ item.src }}"
|
|
dest: "{{ item.dest }}"
|
|
owner: root
|
|
mode: '700'
|
|
force: true
|
|
notify: "{{ item.notify | default(omit) }}"
|
|
loop: "{{ templates_to_apply }}"
|
|
when: >
|
|
item.when | default(true) | bool
|
|
vars:
|
|
templates_to_apply:
|
|
|
|
- src: kubernetes-manifest-rbac.yaml.j2
|
|
dest: /var/lib/rancher/k3s/server/manifests/rbac-authorization-common.yaml
|
|
when: "{{ nfc_role_kubernetes_prime | bool }}"
|
|
|
|
- src: iptables-kubernetes.rules.j2
|
|
dest: "/etc/iptables-reloader/rules.d/iptables-kubernetes.rules"
|
|
notify: firewall_reloader
|
|
when: |-
|
|
{%- if firewall_installed | default(false) -%}
|
|
|
|
{{ firewall_rules_dir_metadata.stat.exists }}
|
|
|
|
{%- else -%}
|
|
|
|
false
|
|
|
|
{%- endif %}
|
|
|
|
|
|
- name: Add Kubernetes Node Labels
|
|
ansible.builtin.copy:
|
|
content: |-
|
|
apiVersion: v1
|
|
kind: Node
|
|
metadata:
|
|
name: "{{ inventory_hostname }}"
|
|
{% if
|
|
nfc_role_kubernetes_node_labels
|
|
and
|
|
not nfc_role_kubernetes_prime | bool
|
|
-%}
|
|
labels:
|
|
{{ nfc_role_kubernetes_node_labels | to_nice_yaml(indent=0) | indent(4) }}
|
|
|
|
{% elif
|
|
nfc_role_kubernetes_prime | bool
|
|
%}
|
|
|
|
labels:
|
|
node-role.kubernetes.io/prime: "true"
|
|
|
|
{% if nfc_role_kubernetes_node_labels %}
|
|
|
|
{{ nfc_role_kubernetes_node_labels | to_nice_yaml(indent=0) | indent(4) }}
|
|
|
|
{% endif %}
|
|
|
|
{%- endif +%}
|
|
{% if nfc_role_kubernetes_node_taints -%}
|
|
spec:
|
|
taints:
|
|
{{ nfc_role_kubernetes_node_taints | to_nice_yaml(indent=0) | indent(4) }}
|
|
{% endif %}
|
|
dest: /var/lib/rancher/k3s/server/manifests/node-manifest-{{ inventory_hostname }}.yaml
|
|
owner: root
|
|
group: root
|
|
mode: '700'
|
|
delegate_to: "{{ nfc_role_kubernetes_node_prime }}"
|
|
when:
|
|
nfc_role_kubernetes_node_labels
|
|
or
|
|
nfc_role_kubernetes_node_taints
|
|
or
|
|
nfc_role_kubernetes_prime | bool
|