86 lines
2.9 KiB
YAML
86 lines
2.9 KiB
YAML
---
|
|
- name: Подготовка всех узлов
|
|
hosts: k8s_nodes
|
|
become: true
|
|
tasks:
|
|
- name: Ожидание разблокировки APT
|
|
shell: "while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; do sleep 5; done;"
|
|
changed_when: false
|
|
|
|
- name: Установка системных зависимостей
|
|
apt:
|
|
update_cache: yes
|
|
name: [apt-transport-https, ca-certificates, curl, gnupg, qemu-guest-agent, socat, conntrack]
|
|
state: present
|
|
register: apt_res
|
|
until: apt_res is success
|
|
retries: 20
|
|
delay: 10
|
|
|
|
- name: Настройка модулей и sysctl
|
|
shell: |
|
|
modprobe overlay && modprobe br_netfilter
|
|
echo -e "overlay\nbr_netfilter" > /etc/modules-load.d/k8s.conf
|
|
cat <<EOF > /etc/sysctl.d/k8s.conf
|
|
net.bridge.bridge-nf-call-iptables = 1
|
|
net.bridge.bridge-nf-call-ip6tables = 1
|
|
net.ipv4.ip_forward = 1
|
|
EOF
|
|
sysctl --system
|
|
changed_when: false
|
|
|
|
- name: Установка Containerd
|
|
apt:
|
|
name: containerd
|
|
state: present
|
|
|
|
- name: Конфигурация Containerd
|
|
shell: |
|
|
mkdir -p /etc/containerd
|
|
containerd config default > /etc/containerd/config.toml
|
|
sed -i 's/SystemdCgroup = false/SystemdCgroup = true/' /etc/containerd/config.toml
|
|
systemctl restart containerd
|
|
changed_when: true
|
|
|
|
- name: Добавление репозитория Kubernetes (Tsinghua)
|
|
shell: |
|
|
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --yes
|
|
echo "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg arch=amd64] https://mirrors.tuna.tsinghua.edu.cn/kubernetes/core:/stable:/v1.32/deb/ /" > /etc/apt/sources.list.d/kubernetes.list
|
|
|
|
- name: Установка пакетов Kubernetes
|
|
apt:
|
|
name: [kubelet, kubeadm, kubectl]
|
|
state: present
|
|
update_cache: yes
|
|
register: k8s_apt
|
|
until: k8s_apt is success
|
|
retries: 15
|
|
delay: 10
|
|
|
|
- name: Инициализация Master
|
|
hosts: masters_group
|
|
become: true
|
|
tasks:
|
|
- name: Kubeadm Init
|
|
shell: "kubeadm init --pod-network-cidr=10.244.0.0/16 --skip-phases=addon/kube-proxy"
|
|
args:
|
|
creates: /etc/kubernetes/admin.conf
|
|
|
|
- name: Config for ubuntu user
|
|
shell: |
|
|
mkdir -p /home/ubuntu/.kube
|
|
cp -f /etc/kubernetes/admin.conf /home/ubuntu/.kube/config
|
|
chown ubuntu:ubuntu /home/ubuntu/.kube/config
|
|
|
|
- name: Generate Join Command
|
|
shell: "kubeadm token create --print-join-command"
|
|
register: join_cmd
|
|
|
|
- name: Join Workers
|
|
hosts: workers_group
|
|
become: true
|
|
tasks:
|
|
- name: Join to cluster
|
|
shell: "{{ hostvars['k8s-master']['join_cmd']['stdout'] }}"
|
|
args:
|
|
creates: /etc/kubernetes/kubelet.conf |