Обновить ansible/k8s_setup.yml
This commit is contained in:
@@ -8,7 +8,7 @@
|
|||||||
shell: "while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; do sleep 5; done;"
|
shell: "while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; do sleep 5; done;"
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
- name: 1. Удаление всех старых репозиториев K8s (Очистка)
|
- name: 1. Полная очистка старых репозиториев K8s (Удаление мусора)
|
||||||
shell: "rm -f /etc/apt/sources.list.d/kubernetes.list /etc/apt/sources.list.d/*k8s* /etc/apt/sources.list.d/*kubern*"
|
shell: "rm -f /etc/apt/sources.list.d/kubernetes.list /etc/apt/sources.list.d/*k8s* /etc/apt/sources.list.d/*kubern*"
|
||||||
changed_when: true
|
changed_when: true
|
||||||
|
|
||||||
@@ -30,24 +30,31 @@
|
|||||||
sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab
|
sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab
|
||||||
when: ansible_swaptotal_mb > 0
|
when: ansible_swaptotal_mb > 0
|
||||||
|
|
||||||
- name: 5. Модули ядра и Sysctl
|
- name: 5. Модули ядра
|
||||||
shell: |
|
shell: |
|
||||||
modprobe overlay
|
modprobe overlay
|
||||||
modprobe br_netfilter
|
modprobe br_netfilter
|
||||||
cat <<EOF > /etc/sysctl.d/k8s.conf
|
echo -e "overlay\nbr_netfilter" > /etc/modules-load.d/k8s.conf
|
||||||
|
changed_when: false
|
||||||
|
|
||||||
|
- name: 6. Настройка параметров sysctl
|
||||||
|
copy:
|
||||||
|
dest: /etc/sysctl.d/k8s.conf
|
||||||
|
content: |
|
||||||
net.bridge.bridge-nf-call-iptables = 1
|
net.bridge.bridge-nf-call-iptables = 1
|
||||||
net.bridge.bridge-nf-call-ip6tables = 1
|
net.bridge.bridge-nf-call-ip6tables = 1
|
||||||
net.ipv4.ip_forward = 1
|
net.ipv4.ip_forward = 1
|
||||||
EOF
|
|
||||||
sysctl --system
|
- name: 7. Применить sysctl
|
||||||
|
command: sysctl --system
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
- name: 6. Установка Containerd
|
- name: 8. Установка Containerd
|
||||||
apt:
|
apt:
|
||||||
name: containerd
|
name: containerd
|
||||||
state: present
|
state: present
|
||||||
|
|
||||||
- name: 7. Конфигурация Containerd (SystemdCgroup)
|
- name: 9. Конфигурация Containerd (SystemdCgroup)
|
||||||
shell: |
|
shell: |
|
||||||
mkdir -p /etc/containerd
|
mkdir -p /etc/containerd
|
||||||
containerd config default > /etc/containerd/config.toml
|
containerd config default > /etc/containerd/config.toml
|
||||||
@@ -55,7 +62,7 @@
|
|||||||
systemctl restart containerd
|
systemctl restart containerd
|
||||||
changed_when: true
|
changed_when: true
|
||||||
|
|
||||||
- name: 8. Добавление ключа Kubernetes (Официальный)
|
- name: 10. Добавление ключа Kubernetes (Официальный)
|
||||||
shell: |
|
shell: |
|
||||||
mkdir -p /etc/apt/keyrings
|
mkdir -p /etc/apt/keyrings
|
||||||
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes
|
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes
|
||||||
@@ -64,21 +71,25 @@
|
|||||||
retries: 5
|
retries: 5
|
||||||
delay: 5
|
delay: 5
|
||||||
|
|
||||||
- name: 9. Настройка официального репозитория (Flat format)
|
- name: 11. Настройка репозитория Kubernetes (Official Flat)
|
||||||
copy:
|
copy:
|
||||||
dest: /etc/apt/sources.list.d/kubernetes.list
|
dest: /etc/apt/sources.list.d/kubernetes.list
|
||||||
content: "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.32/deb/ /"
|
content: "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.32/deb/ /"
|
||||||
|
|
||||||
- name: 10. Установка компонентов K8s
|
- name: 12. Установка компонентов K8s (с проверкой)
|
||||||
shell: |
|
apt:
|
||||||
apt-get update -y
|
name: [kubelet, kubeadm, kubectl]
|
||||||
apt-get install -y kubelet kubeadm kubectl
|
state: present
|
||||||
apt-mark hold kubelet kubeadm kubectl
|
update_cache: yes
|
||||||
register: install_res
|
register: apt_res
|
||||||
until: install_res is success
|
until: apt_res is success
|
||||||
retries: 5
|
retries: 5
|
||||||
delay: 10
|
delay: 10
|
||||||
|
|
||||||
|
- name: 13. Фиксация версий
|
||||||
|
shell: apt-mark hold kubelet kubeadm kubectl
|
||||||
|
changed_when: false
|
||||||
|
|
||||||
- name: Инициализация Master-ноды
|
- name: Инициализация Master-ноды
|
||||||
hosts: masters
|
hosts: masters
|
||||||
become: true
|
become: true
|
||||||
@@ -88,14 +99,11 @@
|
|||||||
path: /etc/kubernetes/admin.conf
|
path: /etc/kubernetes/admin.conf
|
||||||
register: kube_init
|
register: kube_init
|
||||||
|
|
||||||
- name: Kubeadm Init (без kube-proxy)
|
- name: Kubeadm Init (используем полный путь)
|
||||||
command: >
|
shell: /usr/bin/kubeadm init --pod-network-cidr=10.244.0.0/16 --skip-phases=addon/kube-proxy
|
||||||
kubeadm init
|
|
||||||
--pod-network-cidr=10.244.0.0/16
|
|
||||||
--skip-phases=addon/kube-proxy
|
|
||||||
when: not kube_init.stat.exists
|
when: not kube_init.stat.exists
|
||||||
|
|
||||||
- name: Кубеконфиг для пользователя ubuntu
|
- name: Настройка конфига для пользователя ubuntu
|
||||||
shell: |
|
shell: |
|
||||||
mkdir -p /home/ubuntu/.kube
|
mkdir -p /home/ubuntu/.kube
|
||||||
cp -f /etc/kubernetes/admin.conf /home/ubuntu/.kube/config
|
cp -f /etc/kubernetes/admin.conf /home/ubuntu/.kube/config
|
||||||
@@ -104,7 +112,7 @@
|
|||||||
creates: /home/ubuntu/.kube/config
|
creates: /home/ubuntu/.kube/config
|
||||||
|
|
||||||
- name: Генерация команды Join
|
- name: Генерация команды Join
|
||||||
command: kubeadm token create --print-join-command
|
shell: /usr/bin/kubeadm token create --print-join-command
|
||||||
register: join_command_raw
|
register: join_command_raw
|
||||||
|
|
||||||
- name: Сохранение факта Join
|
- name: Сохранение факта Join
|
||||||
@@ -120,8 +128,8 @@
|
|||||||
path: /etc/kubernetes/kubelet.conf
|
path: /etc/kubernetes/kubelet.conf
|
||||||
register: kube_worker_init
|
register: kube_worker_init
|
||||||
|
|
||||||
- name: Join к кластеру
|
- name: Join к кластеру (используем полный путь)
|
||||||
command: "{{ hostvars[groups['masters'][0]]['join_command'] }}"
|
shell: "/usr/bin/{{ hostvars[groups['masters'][0]]['join_command'] }}"
|
||||||
when: not kube_worker_init.stat.exists
|
when: not kube_worker_init.stat.exists
|
||||||
|
|
||||||
- name: Установка Cilium (eBPF)
|
- name: Установка Cilium (eBPF)
|
||||||
@@ -135,5 +143,5 @@
|
|||||||
sudo tar xzvf cilium-linux-amd64.tar.gz -C /usr/local/bin
|
sudo tar xzvf cilium-linux-amd64.tar.gz -C /usr/local/bin
|
||||||
rm cilium-linux-amd64.tar.gz
|
rm cilium-linux-amd64.tar.gz
|
||||||
fi
|
fi
|
||||||
cilium install --set kubeProxyReplacement=true
|
/usr/local/bin/cilium install --set kubeProxyReplacement=true
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
Reference in New Issue
Block a user