Обновить ansible/k8s_setup.yml

This commit is contained in:
2025-12-28 13:32:14 +00:00
parent e0d31f389a
commit 64bda2fdbb

View File

@@ -8,7 +8,7 @@
shell: "while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; do sleep 5; done;" shell: "while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; do sleep 5; done;"
changed_when: false changed_when: false
- name: 1. Удаление всех старых репозиториев K8s (Очистка) - name: 1. Полная очистка старых репозиториев K8s (Удаление мусора)
shell: "rm -f /etc/apt/sources.list.d/kubernetes.list /etc/apt/sources.list.d/*k8s* /etc/apt/sources.list.d/*kubern*" shell: "rm -f /etc/apt/sources.list.d/kubernetes.list /etc/apt/sources.list.d/*k8s* /etc/apt/sources.list.d/*kubern*"
changed_when: true changed_when: true
@@ -30,24 +30,31 @@
sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab
when: ansible_swaptotal_mb > 0 when: ansible_swaptotal_mb > 0
- name: 5. Модули ядра и Sysctl - name: 5. Модули ядра
shell: | shell: |
modprobe overlay modprobe overlay
modprobe br_netfilter modprobe br_netfilter
cat <<EOF > /etc/sysctl.d/k8s.conf echo -e "overlay\nbr_netfilter" > /etc/modules-load.d/k8s.conf
changed_when: false
- name: 6. Настройка параметров sysctl
copy:
dest: /etc/sysctl.d/k8s.conf
content: |
net.bridge.bridge-nf-call-iptables = 1 net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1 net.bridge.bridge-nf-call-ip6tables = 1
net.ipv4.ip_forward = 1 net.ipv4.ip_forward = 1
EOF
sysctl --system - name: 7. Применить sysctl
command: sysctl --system
changed_when: false changed_when: false
- name: 6. Установка Containerd - name: 8. Установка Containerd
apt: apt:
name: containerd name: containerd
state: present state: present
- name: 7. Конфигурация Containerd (SystemdCgroup) - name: 9. Конфигурация Containerd (SystemdCgroup)
shell: | shell: |
mkdir -p /etc/containerd mkdir -p /etc/containerd
containerd config default > /etc/containerd/config.toml containerd config default > /etc/containerd/config.toml
@@ -55,7 +62,7 @@
systemctl restart containerd systemctl restart containerd
changed_when: true changed_when: true
- name: 8. Добавление ключа Kubernetes (Официальный) - name: 10. Добавление ключа Kubernetes (Официальный)
shell: | shell: |
mkdir -p /etc/apt/keyrings mkdir -p /etc/apt/keyrings
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes
@@ -64,21 +71,25 @@
retries: 5 retries: 5
delay: 5 delay: 5
- name: 9. Настройка официального репозитория (Flat format) - name: 11. Настройка репозитория Kubernetes (Official Flat)
copy: copy:
dest: /etc/apt/sources.list.d/kubernetes.list dest: /etc/apt/sources.list.d/kubernetes.list
content: "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.32/deb/ /" content: "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.32/deb/ /"
- name: 10. Установка компонентов K8s - name: 12. Установка компонентов K8s (с проверкой)
shell: | apt:
apt-get update -y name: [kubelet, kubeadm, kubectl]
apt-get install -y kubelet kubeadm kubectl state: present
apt-mark hold kubelet kubeadm kubectl update_cache: yes
register: install_res register: apt_res
until: install_res is success until: apt_res is success
retries: 5 retries: 5
delay: 10 delay: 10
- name: 13. Фиксация версий
shell: apt-mark hold kubelet kubeadm kubectl
changed_when: false
- name: Инициализация Master-ноды - name: Инициализация Master-ноды
hosts: masters hosts: masters
become: true become: true
@@ -88,14 +99,11 @@
path: /etc/kubernetes/admin.conf path: /etc/kubernetes/admin.conf
register: kube_init register: kube_init
- name: Kubeadm Init (без kube-proxy) - name: Kubeadm Init (используем полный путь)
command: > shell: /usr/bin/kubeadm init --pod-network-cidr=10.244.0.0/16 --skip-phases=addon/kube-proxy
kubeadm init
--pod-network-cidr=10.244.0.0/16
--skip-phases=addon/kube-proxy
when: not kube_init.stat.exists when: not kube_init.stat.exists
- name: Кубеконфиг для пользователя ubuntu - name: Настройка конфига для пользователя ubuntu
shell: | shell: |
mkdir -p /home/ubuntu/.kube mkdir -p /home/ubuntu/.kube
cp -f /etc/kubernetes/admin.conf /home/ubuntu/.kube/config cp -f /etc/kubernetes/admin.conf /home/ubuntu/.kube/config
@@ -104,7 +112,7 @@
creates: /home/ubuntu/.kube/config creates: /home/ubuntu/.kube/config
- name: Генерация команды Join - name: Генерация команды Join
command: kubeadm token create --print-join-command shell: /usr/bin/kubeadm token create --print-join-command
register: join_command_raw register: join_command_raw
- name: Сохранение факта Join - name: Сохранение факта Join
@@ -120,8 +128,8 @@
path: /etc/kubernetes/kubelet.conf path: /etc/kubernetes/kubelet.conf
register: kube_worker_init register: kube_worker_init
- name: Join к кластеру - name: Join к кластеру (используем полный путь)
command: "{{ hostvars[groups['masters'][0]]['join_command'] }}" shell: "/usr/bin/{{ hostvars[groups['masters'][0]]['join_command'] }}"
when: not kube_worker_init.stat.exists when: not kube_worker_init.stat.exists
- name: Установка Cilium (eBPF) - name: Установка Cilium (eBPF)
@@ -135,5 +143,5 @@
sudo tar xzvf cilium-linux-amd64.tar.gz -C /usr/local/bin sudo tar xzvf cilium-linux-amd64.tar.gz -C /usr/local/bin
rm cilium-linux-amd64.tar.gz rm cilium-linux-amd64.tar.gz
fi fi
cilium install --set kubeProxyReplacement=true /usr/local/bin/cilium install --set kubeProxyReplacement=true
ignore_errors: true ignore_errors: true