Обновить ansible/k8s_setup.yml

This commit is contained in:
2025-12-28 18:24:33 +00:00
parent 675a14c3f5
commit 2a6409ab9f

View File

@@ -1,24 +1,13 @@
--- ---
- name: Подготовка всех узлов (Master и Workers) - name: Подготовка всех узлов
hosts: k8s_nodes hosts: k8s_nodes
become: true become: true
gather_facts: true
tasks: tasks:
- name: 0. Ожидание разблокировки APT (усиленное) - name: Ожидание разблокировки APT
shell: "while fuser /var/lib/dpkg/lock-frontend /var/lib/apt/lists/lock /var/lib/dpkg/lock >/dev/null 2>&1; do sleep 5; done;" shell: "while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; do sleep 5; done;"
changed_when: false changed_when: false
- name: 1. Очистка старых конфигов K8s - name: Установка системных зависимостей
shell: "rm -f /etc/apt/sources.list.d/kubernetes.list /etc/apt/sources.list.d/*k8s*"
changed_when: true
- name: 2. Настройка APT (Force IPv4 и MTU)
shell: |
echo 'Acquire::ForceIPv4 "true";' > /etc/apt/apt.conf.d/99force-ipv4
ip link set dev eth0 mtu 1442 || true
changed_when: false
- name: 3. Установка системных зависимостей (с повторами)
apt: apt:
update_cache: yes update_cache: yes
name: [apt-transport-https, ca-certificates, curl, gnupg, qemu-guest-agent, socat, conntrack] name: [apt-transport-https, ca-certificates, curl, gnupg, qemu-guest-agent, socat, conntrack]
@@ -28,16 +17,10 @@
retries: 20 retries: 20
delay: 10 delay: 10
- name: 4. Отключение SWAP - name: Настройка модулей и sysctl
shell: | shell: |
swapoff -a modprobe overlay && modprobe br_netfilter
sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab echo -e "overlay\nbr_netfilter" > /etc/modules-load.d/k8s.conf
when: ansible_swaptotal_mb > 0
- name: 5. Модули ядра и Sysctl
shell: |
modprobe overlay
modprobe br_netfilter
cat <<EOF > /etc/sysctl.d/k8s.conf cat <<EOF > /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-iptables = 1 net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1 net.bridge.bridge-nf-call-ip6tables = 1
@@ -46,16 +29,12 @@
sysctl --system sysctl --system
changed_when: false changed_when: false
- name: 6. Установка Containerd - name: Установка Containerd
apt: apt:
name: containerd name: containerd
state: present state: present
register: cont_res
until: cont_res is success
retries: 10
delay: 5
- name: 7. Конфигурация Containerd (SystemdCgroup) - name: Конфигурация Containerd
shell: | shell: |
mkdir -p /etc/containerd mkdir -p /etc/containerd
containerd config default > /etc/containerd/config.toml containerd config default > /etc/containerd/config.toml
@@ -63,35 +42,22 @@
systemctl restart containerd systemctl restart containerd
changed_when: true changed_when: true
- name: 8. Добавление ключа Kubernetes - name: Добавление репозитория Kubernetes (Tsinghua)
shell: | shell: |
mkdir -p /etc/apt/keyrings
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes
register: key_res echo "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg arch=amd64] https://mirrors.tuna.tsinghua.edu.cn/kubernetes/core:/stable:/v1.32/deb/ /" > /etc/apt/sources.list.d/kubernetes.list
until: key_res is success
retries: 5
- name: 9. Настройка репозитория (Tsinghua) - name: Установка пакетов Kubernetes
copy:
dest: /etc/apt/sources.list.d/kubernetes.list
content: "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg arch=amd64] https://mirrors.tuna.tsinghua.edu.cn/kubernetes/core:/stable:/v1.32/deb/ /"
- name: 10. Установка компонентов K8s
apt: apt:
name: [kubelet, kubeadm, kubectl] name: [kubelet, kubeadm, kubectl]
state: present state: present
update_cache: yes update_cache: yes
allow_change_held_packages: yes register: k8s_apt
register: k8s_res until: k8s_apt is success
until: k8s_res is success retries: 15
retries: 10
delay: 10 delay: 10
- name: 11. Фиксация версий - name: Инициализация Master
shell: apt-mark hold kubelet kubeadm kubectl
changed_when: false
- name: Инициализация Master-ноды
hosts: masters_group hosts: masters_group
become: true become: true
tasks: tasks:
@@ -100,30 +66,21 @@
args: args:
creates: /etc/kubernetes/admin.conf creates: /etc/kubernetes/admin.conf
- name: Настройка конфига для ubuntu - name: Config for ubuntu user
shell: | shell: |
mkdir -p /home/ubuntu/.kube mkdir -p /home/ubuntu/.kube
cp -f /etc/kubernetes/admin.conf /home/ubuntu/.kube/config cp -f /etc/kubernetes/admin.conf /home/ubuntu/.kube/config
chown ubuntu:ubuntu /home/ubuntu/.kube/config chown ubuntu:ubuntu /home/ubuntu/.kube/config
args:
creates: /home/ubuntu/.kube/config
- name: Генерация команды Join - name: Generate Join Command
shell: "kubeadm token create --print-join-command" shell: "kubeadm token create --print-join-command"
register: join_command_raw register: join_cmd
- name: Сохранение факта Join - name: Join Workers
set_fact:
join_command: "{{ join_command_raw.stdout }}"
- name: Подключение Worker-нод
hosts: workers_group hosts: workers_group
become: true become: true
tasks: tasks:
- name: Join к кластеру - name: Join to cluster
shell: "{{ hostvars[groups['masters_group'][0]]['join_command'] }}" shell: "{{ hostvars['k8s-master']['join_cmd']['stdout'] }}"
args: args:
creates: /etc/kubernetes/kubelet.conf creates: /etc/kubernetes/kubelet.conf
- name: Stage 4 - Post-install (CNI & MetalLB)
import_playbook: k8s_post_install.yml