Обновить ansible/k8s_setup.yml
This commit is contained in:
@@ -1,24 +1,13 @@
|
|||||||
---
|
---
|
||||||
- name: Подготовка всех узлов (Master и Workers)
|
- name: Подготовка всех узлов
|
||||||
hosts: k8s_nodes
|
hosts: k8s_nodes
|
||||||
become: true
|
become: true
|
||||||
gather_facts: true
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: 0. Ожидание разблокировки APT (усиленное)
|
- name: Ожидание разблокировки APT
|
||||||
shell: "while fuser /var/lib/dpkg/lock-frontend /var/lib/apt/lists/lock /var/lib/dpkg/lock >/dev/null 2>&1; do sleep 5; done;"
|
shell: "while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; do sleep 5; done;"
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
- name: 1. Очистка старых конфигов K8s
|
- name: Установка системных зависимостей
|
||||||
shell: "rm -f /etc/apt/sources.list.d/kubernetes.list /etc/apt/sources.list.d/*k8s*"
|
|
||||||
changed_when: true
|
|
||||||
|
|
||||||
- name: 2. Настройка APT (Force IPv4 и MTU)
|
|
||||||
shell: |
|
|
||||||
echo 'Acquire::ForceIPv4 "true";' > /etc/apt/apt.conf.d/99force-ipv4
|
|
||||||
ip link set dev eth0 mtu 1442 || true
|
|
||||||
changed_when: false
|
|
||||||
|
|
||||||
- name: 3. Установка системных зависимостей (с повторами)
|
|
||||||
apt:
|
apt:
|
||||||
update_cache: yes
|
update_cache: yes
|
||||||
name: [apt-transport-https, ca-certificates, curl, gnupg, qemu-guest-agent, socat, conntrack]
|
name: [apt-transport-https, ca-certificates, curl, gnupg, qemu-guest-agent, socat, conntrack]
|
||||||
@@ -28,16 +17,10 @@
|
|||||||
retries: 20
|
retries: 20
|
||||||
delay: 10
|
delay: 10
|
||||||
|
|
||||||
- name: 4. Отключение SWAP
|
- name: Настройка модулей и sysctl
|
||||||
shell: |
|
shell: |
|
||||||
swapoff -a
|
modprobe overlay && modprobe br_netfilter
|
||||||
sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab
|
echo -e "overlay\nbr_netfilter" > /etc/modules-load.d/k8s.conf
|
||||||
when: ansible_swaptotal_mb > 0
|
|
||||||
|
|
||||||
- name: 5. Модули ядра и Sysctl
|
|
||||||
shell: |
|
|
||||||
modprobe overlay
|
|
||||||
modprobe br_netfilter
|
|
||||||
cat <<EOF > /etc/sysctl.d/k8s.conf
|
cat <<EOF > /etc/sysctl.d/k8s.conf
|
||||||
net.bridge.bridge-nf-call-iptables = 1
|
net.bridge.bridge-nf-call-iptables = 1
|
||||||
net.bridge.bridge-nf-call-ip6tables = 1
|
net.bridge.bridge-nf-call-ip6tables = 1
|
||||||
@@ -46,16 +29,12 @@
|
|||||||
sysctl --system
|
sysctl --system
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
- name: 6. Установка Containerd
|
- name: Установка Containerd
|
||||||
apt:
|
apt:
|
||||||
name: containerd
|
name: containerd
|
||||||
state: present
|
state: present
|
||||||
register: cont_res
|
|
||||||
until: cont_res is success
|
|
||||||
retries: 10
|
|
||||||
delay: 5
|
|
||||||
|
|
||||||
- name: 7. Конфигурация Containerd (SystemdCgroup)
|
- name: Конфигурация Containerd
|
||||||
shell: |
|
shell: |
|
||||||
mkdir -p /etc/containerd
|
mkdir -p /etc/containerd
|
||||||
containerd config default > /etc/containerd/config.toml
|
containerd config default > /etc/containerd/config.toml
|
||||||
@@ -63,35 +42,22 @@
|
|||||||
systemctl restart containerd
|
systemctl restart containerd
|
||||||
changed_when: true
|
changed_when: true
|
||||||
|
|
||||||
- name: 8. Добавление ключа Kubernetes
|
- name: Добавление репозитория Kubernetes (Tsinghua)
|
||||||
shell: |
|
shell: |
|
||||||
mkdir -p /etc/apt/keyrings
|
|
||||||
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes
|
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes
|
||||||
register: key_res
|
echo "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg arch=amd64] https://mirrors.tuna.tsinghua.edu.cn/kubernetes/core:/stable:/v1.32/deb/ /" > /etc/apt/sources.list.d/kubernetes.list
|
||||||
until: key_res is success
|
|
||||||
retries: 5
|
|
||||||
|
|
||||||
- name: 9. Настройка репозитория (Tsinghua)
|
- name: Установка пакетов Kubernetes
|
||||||
copy:
|
|
||||||
dest: /etc/apt/sources.list.d/kubernetes.list
|
|
||||||
content: "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg arch=amd64] https://mirrors.tuna.tsinghua.edu.cn/kubernetes/core:/stable:/v1.32/deb/ /"
|
|
||||||
|
|
||||||
- name: 10. Установка компонентов K8s
|
|
||||||
apt:
|
apt:
|
||||||
name: [kubelet, kubeadm, kubectl]
|
name: [kubelet, kubeadm, kubectl]
|
||||||
state: present
|
state: present
|
||||||
update_cache: yes
|
update_cache: yes
|
||||||
allow_change_held_packages: yes
|
register: k8s_apt
|
||||||
register: k8s_res
|
until: k8s_apt is success
|
||||||
until: k8s_res is success
|
retries: 15
|
||||||
retries: 10
|
|
||||||
delay: 10
|
delay: 10
|
||||||
|
|
||||||
- name: 11. Фиксация версий
|
- name: Инициализация Master
|
||||||
shell: apt-mark hold kubelet kubeadm kubectl
|
|
||||||
changed_when: false
|
|
||||||
|
|
||||||
- name: Инициализация Master-ноды
|
|
||||||
hosts: masters_group
|
hosts: masters_group
|
||||||
become: true
|
become: true
|
||||||
tasks:
|
tasks:
|
||||||
@@ -100,30 +66,21 @@
|
|||||||
args:
|
args:
|
||||||
creates: /etc/kubernetes/admin.conf
|
creates: /etc/kubernetes/admin.conf
|
||||||
|
|
||||||
- name: Настройка конфига для ubuntu
|
- name: Config for ubuntu user
|
||||||
shell: |
|
shell: |
|
||||||
mkdir -p /home/ubuntu/.kube
|
mkdir -p /home/ubuntu/.kube
|
||||||
cp -f /etc/kubernetes/admin.conf /home/ubuntu/.kube/config
|
cp -f /etc/kubernetes/admin.conf /home/ubuntu/.kube/config
|
||||||
chown ubuntu:ubuntu /home/ubuntu/.kube/config
|
chown ubuntu:ubuntu /home/ubuntu/.kube/config
|
||||||
args:
|
|
||||||
creates: /home/ubuntu/.kube/config
|
|
||||||
|
|
||||||
- name: Генерация команды Join
|
- name: Generate Join Command
|
||||||
shell: "kubeadm token create --print-join-command"
|
shell: "kubeadm token create --print-join-command"
|
||||||
register: join_command_raw
|
register: join_cmd
|
||||||
|
|
||||||
- name: Сохранение факта Join
|
- name: Join Workers
|
||||||
set_fact:
|
|
||||||
join_command: "{{ join_command_raw.stdout }}"
|
|
||||||
|
|
||||||
- name: Подключение Worker-нод
|
|
||||||
hosts: workers_group
|
hosts: workers_group
|
||||||
become: true
|
become: true
|
||||||
tasks:
|
tasks:
|
||||||
- name: Join к кластеру
|
- name: Join to cluster
|
||||||
shell: "{{ hostvars[groups['masters_group'][0]]['join_command'] }}"
|
shell: "{{ hostvars['k8s-master']['join_cmd']['stdout'] }}"
|
||||||
args:
|
args:
|
||||||
creates: /etc/kubernetes/kubelet.conf
|
creates: /etc/kubernetes/kubelet.conf
|
||||||
|
|
||||||
- name: Stage 4 - Post-install (CNI & MetalLB)
|
|
||||||
import_playbook: k8s_post_install.yml
|
|
||||||
Reference in New Issue
Block a user