113 lines
4.0 KiB
YAML
113 lines
4.0 KiB
YAML
---
|
|
- name: Подготовка всех узлов
|
|
hosts: masters,workers # <--- ИЗМЕНИЛИ all на masters,workers
|
|
become: true
|
|
tasks:
|
|
- name: Ожидание разблокировки APT (система обновляется после первой загрузки)
|
|
shell: while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; do sleep 5; done;
|
|
changed_when: false
|
|
|
|
- name: Обновление системы
|
|
apt: update_cache=yes upgrade=dist
|
|
|
|
- name: Установка базовых пакетов
|
|
apt:
|
|
name: [apt-transport-https, ca-certificates, curl, gnupg, qemu-guest-agent]
|
|
state: present
|
|
|
|
- name: Отключение SWAP
|
|
command: swapoff -a
|
|
when: ansible_swaptotal_mb > 0
|
|
|
|
- name: Загрузка модулей ядра
|
|
copy:
|
|
dest: /etc/modules-load.d/k8s.conf
|
|
content: |
|
|
overlay
|
|
br_netfilter
|
|
|
|
- name: Применение модулей
|
|
shell: |
|
|
modprobe overlay
|
|
modprobe br_netfilter
|
|
|
|
- name: Настройка параметров sysctl
|
|
copy:
|
|
dest: /etc/sysctl.d/k8s.conf
|
|
content: |
|
|
net.bridge.bridge-nf-call-iptables = 1
|
|
net.bridge.bridge-nf-call-ip6tables = 1
|
|
net.ipv4.ip_forward = 1
|
|
register: sysctl_res
|
|
|
|
- name: Применить sysctl
|
|
command: sysctl --system
|
|
when: sysctl_res.changed
|
|
|
|
- name: Установка Containerd (версия 2025 года)
|
|
apt:
|
|
name: containerd
|
|
state: present
|
|
|
|
- name: Настройка Containerd (SystemdCgroup)
|
|
shell: |
|
|
mkdir -p /etc/containerd
|
|
containerd config default > /etc/containerd/config.toml
|
|
sed -i 's/SystemdCgroup = false/SystemdCgroup = true/' /etc/containerd/config.toml
|
|
notify: restart containerd
|
|
|
|
- name: Добавление ключа и репозитория Kubernetes
|
|
shell: |
|
|
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
|
|
echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.32/deb/ /' > /etc/apt/sources.list.d/kubernetes.list
|
|
|
|
- name: Установка компонентов K8s
|
|
apt:
|
|
name: [kubelet, kubeadm, kubectl]
|
|
state: present
|
|
update_cache: yes
|
|
|
|
handlers:
|
|
- name: restart containerd
|
|
service: name=containerd state=restarted
|
|
|
|
- name: Инициализация Master
|
|
hosts: masters
|
|
become: true
|
|
tasks:
|
|
- name: Проверка, инициализирован ли кластер
|
|
stat: path=/etc/kubernetes/admin.conf
|
|
register: kube_init
|
|
|
|
- name: Kubeadm init (без kube-proxy для Cilium)
|
|
command: kubeadm init --pod-network-cidr=10.244.0.0/16 --skip-phases=addon/kube-proxy
|
|
when: not kube_init.stat.exists
|
|
|
|
- name: Настройка конфига для пользователя
|
|
shell: |
|
|
mkdir -p $HOME/.kube
|
|
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
|
|
chown $(id -u):$(id -g) $HOME/.kube/config
|
|
|
|
- name: Генерация команды присоединения
|
|
command: kubeadm token create --print-join-command
|
|
register: join_command
|
|
|
|
- name: Присоединение Worker узлов
|
|
hosts: workers
|
|
become: true
|
|
tasks:
|
|
- name: Join к кластеру
|
|
command: "{{ hostvars[groups['masters'][0]]['join_command'].stdout }}"
|
|
args:
|
|
creates: /etc/kubernetes/kubelet.conf
|
|
|
|
- name: Установка Cilium (eBPF)
|
|
hosts: masters
|
|
tasks:
|
|
- name: Установка Cilium CLI и самого CNI
|
|
shell: |
|
|
curl -L --remote-name-all https://github.com/cilium/cilium-cli/releases/latest/download/cilium-linux-amd64.tar.gz
|
|
tar xzvf cilium-linux-amd64.tar.gz -C /usr/local/bin
|
|
rm cilium-linux-amd64.tar.gz
|
|
cilium install --set kubeProxyReplacement=true |