diff --git a/ansible/k8s_setup.yml b/ansible/k8s_setup.yml index 0faa743..ad65540 100644 --- a/ansible/k8s_setup.yml +++ b/ansible/k8s_setup.yml @@ -8,8 +8,12 @@ shell: "while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; do sleep 5; done;" changed_when: false - - name: 1. Очистка старых репозиториев - shell: "rm -f /etc/apt/sources.list.d/kubernetes.list /etc/apt/sources.list.d/*k8s*" + - name: 1. Ядерная очистка APT и блокировок K8s + shell: | + apt-mark unhold kubelet kubeadm kubectl || true + rm -f /etc/apt/sources.list.d/kubernetes.list /etc/apt/sources.list.d/*k8s* + apt-get remove --purge -y kubelet kubeadm kubectl kubernetes-cni cri-tools || true + apt-get autoremove -y changed_when: true - name: 2. Настройка APT (Force IPv4 и MTU) @@ -18,7 +22,7 @@ ip link set dev eth0 mtu 1442 || true changed_when: false - - name: 3. Установка базовых зависимостей + - name: 3. Установка системных зависимостей apt: update_cache: yes name: [apt-transport-https, ca-certificates, curl, gnupg, qemu-guest-agent, socat, conntrack] @@ -30,31 +34,25 @@ sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab when: ansible_swaptotal_mb > 0 - - name: 5. Модули ядра + - name: 5. Модули ядра и Sysctl shell: | modprobe overlay modprobe br_netfilter echo -e "overlay\nbr_netfilter" > /etc/modules-load.d/k8s.conf + cat < /etc/sysctl.d/k8s.conf + net.bridge.bridge-nf-call-iptables = 1 + net.bridge.bridge-nf-call-ip6tables = 1 + net.ipv4.ip_forward = 1 + EOF + sysctl --system changed_when: false - - name: 6. Настройка параметров sysctl - copy: - dest: /etc/sysctl.d/k8s.conf - content: | - net.bridge.bridge-nf-call-iptables = 1 - net.bridge.bridge-nf-call-ip6tables = 1 - net.ipv4.ip_forward = 1 - - - name: 7. Применить sysctl - command: sysctl --system - changed_when: false - - - name: 8. Установка Containerd + - name: 6. Установка Containerd apt: name: containerd state: present - - name: 9. Конфигурация Containerd (SystemdCgroup) + - name: 7. Конфигурация Containerd (SystemdCgroup) shell: | mkdir -p /etc/containerd containerd config default > /etc/containerd/config.toml @@ -62,7 +60,7 @@ systemctl restart containerd changed_when: true - - name: 10. Добавление ключа Kubernetes + - name: 8. Добавление ключа Kubernetes shell: | mkdir -p /etc/apt/keyrings curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes @@ -71,31 +69,21 @@ retries: 5 delay: 5 - - name: 11. Настройка репозитория Kubernetes (с указанием архитектуры) + - name: 9. Настройка официального репозитория copy: dest: /etc/apt/sources.list.d/kubernetes.list - # Добавили arch=amd64 - content: "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg arch=amd64] https://pkgs.k8s.io/core:/stable:/v1.32/deb/ /" + content: "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.32/deb/ /" - - name: 12. Снятие блокировки версий (Unhold) - shell: apt-mark unhold kubelet kubeadm kubectl - ignore_errors: true # Если пакеты еще не были установлены - changed_when: false - - - name: 13. Установка компонентов K8s (с переустановкой если надо) - apt: - name: [kubelet, kubeadm, kubectl] - state: present - update_cache: yes - register: apt_res - until: apt_res is success - retries: 5 + - name: 10. Принудительная установка компонентов K8s + shell: | + apt-get update + apt-get install -y --allow-change-held-packages kubelet kubeadm kubectl + apt-mark hold kubelet kubeadm kubectl + register: install_res + until: install_res is success + retries: 3 delay: 10 - - name: 14. Фиксация версий K8s (Hold) - shell: apt-mark hold kubelet kubeadm kubectl - changed_when: false - - name: Инициализация Master-ноды hosts: masters become: true