Commit Graph

134 Commits

Author SHA1 Message Date
Jon S. Stumpf 4d6e60281e
Role tweaks (#268)
* Limited boolean values to true/false;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Moved ArchLinux prereq task to be a handler;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Standardized task name for adding cgroup support;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Have backrefs: follow path:;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Addressed ansible-lint errors;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Fixed #264, task 7: Copy K3s service file;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

---------

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>
2023-12-04 09:46:45 -08:00
Roman Ivanov ec02f1cafd
do not blindly overwrite kube config (#263)
* do not blindly overwrite kube config

Signed-off-by: Roman Ivanov <me@roivanov.com>

* don't need to check if an existing config exists

Co-authored-by: Derek Nola <derek.nola@suse.com>
Signed-off-by: Roman Ivanov <me@roivanov.com>
2023-12-01 09:00:30 -08:00
Jon S. Stumpf 34bf054f94
Fixed #260: k3s autocompletion is added to .bashrc only when necessary; (#262)
* Fixed #260: k3s autocompletion is added to .bashrc only when necessary;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Remove Jinja template from name:

Co-authored-by: Derek Nola <derek.nola@suse.com>
Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

---------

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
2023-12-01 08:58:12 -08:00
Derek Nola 19c206d0cb
Update minimum ansible version requirements to avoid airgap error (#258)
* Update minimum ansible version requirements to avoid airgap error

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-30 12:32:19 -08:00
Derek Nola 7fcf82ac64
Rework iptables old version checks (#255)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-16 12:43:45 -08:00
Derek Nola 1e633c5ad1
Rework Role Structure (#254)
* Add more defaults
* Rename roles, covert download to airgap role
* Remove unnecessary gather_facts

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-16 12:03:07 -08:00
Derek Nola 52941b749b
Airgap Support (#253)
* Initial airgap support
* Support any of the compressed image formats
* Add airgap section to README
* Support Airgap SElinux RPM install

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-14 14:36:15 -08:00
Derek Nola 46a842a551
Support K3s config yaml (#252)
* Support K3s config yaml

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-13 14:09:15 -08:00
Derek Nola bec34905c2 Only use iptables alternative on older iptables versions
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-10 15:25:10 -08:00
Derek Nola 3b9982013a Fix issue around using ip addresses in inventory, download and remove agent service properly
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-10 15:25:10 -08:00
Derek Nola e01a8a2a8a
Extra Manifest delpoyment (#244)
* Allow additional manifests to be deployed

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-10 12:13:39 -08:00
Derek Nola 9d918c9da0 Handle apparmor for Debian 11 when parser not present
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-10 11:03:58 -08:00
Derek Nola bfd030290d Add apparmor-parser support for SUSE
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-10 11:03:58 -08:00
Derek Nola e9a283b48c
Minimal Firewall Exceptions (#242)
* Add rules to UFW firewall for basic K3s funtionality

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add firewalld exceptions

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 19:21:46 -08:00
Derek Nola fd4e8bf70b
Allow SELinuix on RHEL family (#241)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 19:19:00 -08:00
Derek Nola bb55bcf07a
Fix reboot handler calls (#239)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 13:56:22 -08:00
Derek Nola 45289ba7d9
Add support for Rocky, bump default install version (#238)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 12:56:38 -08:00
Derek Nola e6233d9f7d
Add support for Service Envs (#237)
* Add support for service ENVs
* Rename PR template
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 12:30:18 -08:00
Derek Nola e864933b04
Add Upgrade Playbook (#236)
* Highlight node reqs.

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add upgrade playbook

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Move PR template

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 10:56:47 -08:00
Derek Nola fd6f288b20
Fix K3s Path, Alternative folder in HA (#233)
* Readd #143 fix

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add PR template

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 09:17:20 -08:00
Derek Nola f369e3a015
Simplify reset playbook (#230)
* Simplify reset playbook

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Cleanup ansible_user kubeconfig

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 16:26:26 -08:00
Derek Nola 20afd4f19e
Simplify K3s service startup for HA
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 15:16:28 -08:00
Derek Nola 565c9fa049
Enforce use of a defined token. Simplifies additional server and agent joining process.
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 14:38:57 -08:00
Derek Nola 9ecdc933ca
Add Vagrantfile for local testing
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 13:42:11 -08:00
Derek Nola 0cd9ffc17f
Use K3s install script instead of direct download
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 13:41:50 -08:00
Assaf Sapir 057b3bfc07
Add archlinux (aarch64) support (#146)
* Add archlinux (aarch64) support

Signed-off-by: Assaf Sapir <meijin007@gmail.com>
2023-11-08 10:31:51 -08:00
Derek Nola 83de43125b Lint fixes
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Nicholas Malcolm 8484c015d6 Fix k3s_server_location only working on default
- K3s has some absolute paths set in various places which cannot be
  changed. Using a symbolic link was the easiest fix. This is nice for
  running K3S on SBC that must boot to SD but K3S data should be stored
  on a faster drive.
- Other changes are for making the site playbook replayable without
  resetting the cluster. Ideally you can rerun it to check existing
  nodes or to add new ones.

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Nicholas Malcolm 7cc70ad609 HA fixes and code tweaks
- Reboot playbook updated for HA testing
- Small adjustment made after testing HA with playbook
- Fix reset playbook failing in some cases

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Nicholas Malcolm cd725780f5 Move k3s_server_location to inventory vars
- All environemt variables are now in one place
- Add --data-dir option to agent and init  service

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Nicholas Malcolm 5b3e2a5db6 Reorganize server tasks, copy config to local
- Inital server starts first so it can grab the token for other servers and copy the config to localhost
- More cleanup of agent/server naming scheme

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Nicholas Malcolm df67c61ba5 Add HA option, change to yaml inventory, cleanup
- HA option for multiple server nodes using embedded etcd
- Switch to yaml inventory file for easier editing and combining vars
- Update to full ansible module names
- Change master/node names to server/agent
- Cleanup small linting errors
- Add reboot playbook which staggers reboot to keep HA cluster up
- Move playbooks to playbook directory

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Derek Nola 1031ea3ce2 Comply with ansible-lint
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-07 14:00:07 -08:00
Mark Hahl 6749ca5874
use full path for k3s binary (#143)
Signed-off-by: Mark Hahl <mark@hahl.id.au>
2023-11-07 10:37:24 -08:00
Nikoleta Verbeck 12db5ef1f1
Fixes related to K3s Issue https://github.com/k3s-io/k3s/issues/4234 (#204)
Signed-off-by: Nikoleta Verbeck <nerdynick@gmail.comn>
Co-authored-by: Nikoleta Verbeck <nerdynick@gmail.comn>
2023-11-07 09:55:02 -08:00
Razurac 8474a8b4e8
Update pre_req tasks (#128)
On Rhel 8.4 ansible_distribution is set to RedHat so the current when condition will fail
Added "RedHat" to the when condition.

Signed-off-by: Razurac <a.zelch@t-online.de>
2023-11-07 09:54:32 -08:00
Frank Villaro-Dixon b1c8c063f7
k3s download: increase `get_url` timeout 10→120s (#213)
The default `get_url` module timeout is 10s. As the k3s binary is around
60MB, it can take some time to download on slow connections or when many
downloads are concurrent (multi-node install).
Increase the timeout a bit from 10s to 120s.

Signed-off-by: Frank Villaro-Dixon <frank@villaro-dixon.eu>
2023-11-07 09:54:21 -08:00
kcir b65b610023
Fix Raspberry tasks for Debian (#151)
* Fix Raspberry tasks for Debian

Signed-off-by: Rick <r.wagenaar@icloud.com>
Signed-off-by: Rick <rick@kcir.nl>

* Move debian yaml files

Signed-off-by: Rick <r.wagenaar@icloud.com>
Signed-off-by: Rick <rick@kcir.nl>

* Add task for Debian to install iptables

Signed-off-by: Rick <rick@kcir.nl>

* Add check for cmdline.txt path for Debian

Signed-off-by: Rick <rick@kcir.nl>

* Remove Debian11 tasks file

Signed-off-by: Rick <rick@kcir.nl>

---------

Signed-off-by: Rick <r.wagenaar@icloud.com>
Signed-off-by: Rick <rick@kcir.nl>
Co-authored-by: Rick <r.wagenaar@icloud.com>
Co-authored-by: Rick <rick@kcir.nl>
2023-11-07 09:53:59 -08:00
Julien DOCHE 5f7bf0d388
Merge pull request #134 from clambin/ipv6
don't try to set ipv6 forward if ipv6 not enabled
2021-10-26 19:16:57 +02:00
clambin 402f83553e don't try to set ipv6 forward if ipv6 not enabled
Signed-off-by: clambin <christophe.lambin@gmail.com>
2021-07-10 15:13:08 +02:00
clambin 98d388c9fa support 'k3s server --data-dir' to put k3s server files in a non-standard location
Signed-off-by: clambin <christophe.lambin@gmail.com>
2021-07-10 15:10:53 +02:00
Julien DOCHE ef8d3a1949
Merge pull request #96 from tomasz-kuzemko/patch-1
Set service file mode -x
2021-02-23 16:30:42 +01:00
Julien DOCHE 88e1a43543 Make sure the reset role can be run with --check
We need to compute what mountpoints would be unmounted even when running with
--check

Signed-off-by: Julien DOCHE <julien.doche@gmail.com>
2021-02-19 00:19:50 +01:00
Julien DOCHE 54629a46bd Change reset deletion order to avoid racecondition
If the k3s binary is launched after the deletion of `/var/lib/rancher/k3s`, k3s
will automatically create this directory. This change deletes the k3s binary
first so that it cannot be called after `/var/lib/rancher/k3s` is deleted

Signed-off-by: Julien DOCHE <julien.doche@gmail.com>
2021-02-19 00:12:51 +01:00
Staf Wagemakers fe7bdf8cda Reorganize the filesystem umount order.
* Clean /var/lib/kubelet before /var/lib/rancher/k3s.
* Umount the filesystem tree in reverse order, to ensure the root
  is umounted last.

Signed-off-by: Staf Wagemakers <staf@wagemakers.be>
2021-01-24 11:04:30 +01:00
kopwei 7e38173d31 Correct repo path in downloading URL
Fix #102, use k3s-io/k3s instead of rancher/k3s

Signed-off-by: kopwei <kopkop@gmail.com>
2020-12-02 15:06:24 +00:00
Tomasz Kuzemko 29e6acb7e7
Set service file mode -x
Systemd service files should not be executable
2020-10-17 23:55:12 +02:00
Julien DOCHE 721c348702
Merge pull request #79 from stafwag/master
Moved Raspberry Pi specifics settings to raspberrypi role
2020-09-27 18:59:18 +02:00
Julien DOCHE a066c77ab5
Merge pull request #80 from jeffspahr/master
Fix umount_with_children typo
2020-09-27 18:47:04 +02:00
Lennart Jern ca7c25b81c Fix linting errors 2020-09-22 21:08:35 +03:00