diff --git a/ansible/k8s_setup.yml b/ansible/k8s_setup.yml index c92f0d8..601128c 100644 --- a/ansible/k8s_setup.yml +++ b/ansible/k8s_setup.yml @@ -8,7 +8,7 @@ shell: "while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; do sleep 5; done;" changed_when: false - - name: 1. Удаление всех старых репозиториев K8s (Очистка) + - name: 1. Полная очистка старых репозиториев K8s (Удаление мусора) shell: "rm -f /etc/apt/sources.list.d/kubernetes.list /etc/apt/sources.list.d/*k8s* /etc/apt/sources.list.d/*kubern*" changed_when: true @@ -30,24 +30,31 @@ sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab when: ansible_swaptotal_mb > 0 - - name: 5. Модули ядра и Sysctl + - name: 5. Модули ядра shell: | modprobe overlay modprobe br_netfilter - cat < /etc/sysctl.d/k8s.conf - net.bridge.bridge-nf-call-iptables = 1 - net.bridge.bridge-nf-call-ip6tables = 1 - net.ipv4.ip_forward = 1 - EOF - sysctl --system + echo -e "overlay\nbr_netfilter" > /etc/modules-load.d/k8s.conf changed_when: false - - name: 6. Установка Containerd + - name: 6. Настройка параметров sysctl + copy: + dest: /etc/sysctl.d/k8s.conf + content: | + net.bridge.bridge-nf-call-iptables = 1 + net.bridge.bridge-nf-call-ip6tables = 1 + net.ipv4.ip_forward = 1 + + - name: 7. Применить sysctl + command: sysctl --system + changed_when: false + + - name: 8. Установка Containerd apt: name: containerd state: present - - name: 7. Конфигурация Containerd (SystemdCgroup) + - name: 9. Конфигурация Containerd (SystemdCgroup) shell: | mkdir -p /etc/containerd containerd config default > /etc/containerd/config.toml @@ -55,7 +62,7 @@ systemctl restart containerd changed_when: true - - name: 8. Добавление ключа Kubernetes (Официальный) + - name: 10. Добавление ключа Kubernetes (Официальный) shell: | mkdir -p /etc/apt/keyrings curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes @@ -64,21 +71,25 @@ retries: 5 delay: 5 - - name: 9. Настройка официального репозитория (Flat format) + - name: 11. Настройка репозитория Kubernetes (Official Flat) copy: dest: /etc/apt/sources.list.d/kubernetes.list content: "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.32/deb/ /" - - name: 10. Установка компонентов K8s - shell: | - apt-get update -y - apt-get install -y kubelet kubeadm kubectl - apt-mark hold kubelet kubeadm kubectl - register: install_res - until: install_res is success + - name: 12. Установка компонентов K8s (с проверкой) + apt: + name: [kubelet, kubeadm, kubectl] + state: present + update_cache: yes + register: apt_res + until: apt_res is success retries: 5 delay: 10 + - name: 13. Фиксация версий + shell: apt-mark hold kubelet kubeadm kubectl + changed_when: false + - name: Инициализация Master-ноды hosts: masters become: true @@ -88,14 +99,11 @@ path: /etc/kubernetes/admin.conf register: kube_init - - name: Kubeadm Init (без kube-proxy) - command: > - kubeadm init - --pod-network-cidr=10.244.0.0/16 - --skip-phases=addon/kube-proxy + - name: Kubeadm Init (используем полный путь) + shell: /usr/bin/kubeadm init --pod-network-cidr=10.244.0.0/16 --skip-phases=addon/kube-proxy when: not kube_init.stat.exists - - name: Кубеконфиг для пользователя ubuntu + - name: Настройка конфига для пользователя ubuntu shell: | mkdir -p /home/ubuntu/.kube cp -f /etc/kubernetes/admin.conf /home/ubuntu/.kube/config @@ -104,7 +112,7 @@ creates: /home/ubuntu/.kube/config - name: Генерация команды Join - command: kubeadm token create --print-join-command + shell: /usr/bin/kubeadm token create --print-join-command register: join_command_raw - name: Сохранение факта Join @@ -120,8 +128,8 @@ path: /etc/kubernetes/kubelet.conf register: kube_worker_init - - name: Join к кластеру - command: "{{ hostvars[groups['masters'][0]]['join_command'] }}" + - name: Join к кластеру (используем полный путь) + shell: "/usr/bin/{{ hostvars[groups['masters'][0]]['join_command'] }}" when: not kube_worker_init.stat.exists - name: Установка Cilium (eBPF) @@ -135,5 +143,5 @@ sudo tar xzvf cilium-linux-amd64.tar.gz -C /usr/local/bin rm cilium-linux-amd64.tar.gz fi - cilium install --set kubeProxyReplacement=true + /usr/local/bin/cilium install --set kubeProxyReplacement=true ignore_errors: true \ No newline at end of file