Commit Graph

144 Commits

Author SHA1 Message Date
laszlojau
9c8ba5c155
Set firewall rules for custom CIDR ranges (#293)
Signed-off-by: laszlojau <49835454+laszlojau@users.noreply.github.com>
2024-02-22 09:34:36 -08:00
Nick To
060362178d
Fix unexpected behaviour when kubeconfig is set (#296)
As detailed in https://github.com/k3s-io/k3s-ansible/issues/295, this
commit fixes the issue that if `kubeconfig` is set to anything other
than the defaults value, then:

- `~/.kube/config` is modified.
- No file at `{{ kubeconfig }}` is created.
- Any existing file and `{{ kubeconfig }}` is deleted.

Signed-off-by: Nick To <nick@nickto.net>
2024-02-05 12:10:45 -08:00
Dmitriy Safronov
fe3df5c836
[#287] fix control node tasks logic to properly change server address on control node (#288)
Signed-off-by: Dmitriy Safronov <zimniy@cyberbrain.pw>
2024-01-17 16:06:20 -08:00
Dmitriy Safronov
502d93bc02
[289] Add K3s autocomplete to user bashrc on any server node, not only on first (#290)
Signed-off-by: Dmitriy Safronov <zimniy@cyberbrain.pw>
2024-01-16 10:33:02 -08:00
shkuviak
d1d7864337
k3s agent - Fix bad reference to k3s-agent.service.env in k3s-agent.service (#283)
Signed-off-by: Nicolas JENDROWIAK <75165555+shkuviak@users.noreply.github.com>
2024-01-04 11:54:22 -08:00
Derek Nola
7df05a755b
Completely setup kubectl for ansible_user, with option to disable it (#278)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-12-13 12:59:04 -08:00
Xiangkun Liu
1527df5631
Use inventory_hostname instead of ansible_hostname (#274)
Signed-off-by: Xiangkun Liu <git@lxk.sh>
Co-authored-by: Xiangkun Liu <git@lxk.sh>
2023-12-11 14:44:02 -08:00
Dani Hodovic
fdaba90bb0
fix: yaml conditional logic (#273)
Running the playbook with version 2.16.1
Replace `&&` with `and`
Signed-off-by: Dani Hodovic <dani.hodovic@gmail.com>
2023-12-11 14:31:13 -08:00
Derek Nola
1c11767619
Only setup/cleanup yaml config for servers (#272)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-12-06 13:55:32 -08:00
Derek Nola
9998f503b4
Support user defined kubeconfig, fix merging context (#266)
* Support user defined kubeconfig, fix merging context

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-12-06 09:13:05 -08:00
Jon S. Stumpf
4d6e60281e
Role tweaks (#268)
* Limited boolean values to true/false;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Moved ArchLinux prereq task to be a handler;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Standardized task name for adding cgroup support;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Have backrefs: follow path:;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Addressed ansible-lint errors;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Fixed #264, task 7: Copy K3s service file;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

---------

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>
2023-12-04 09:46:45 -08:00
Roman Ivanov
ec02f1cafd
do not blindly overwrite kube config (#263)
* do not blindly overwrite kube config

Signed-off-by: Roman Ivanov <me@roivanov.com>

* don't need to check if an existing config exists

Co-authored-by: Derek Nola <derek.nola@suse.com>
Signed-off-by: Roman Ivanov <me@roivanov.com>
2023-12-01 09:00:30 -08:00
Jon S. Stumpf
34bf054f94
Fixed #260: k3s autocompletion is added to .bashrc only when necessary; (#262)
* Fixed #260: k3s autocompletion is added to .bashrc only when necessary;

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

* Remove Jinja template from name:

Co-authored-by: Derek Nola <derek.nola@suse.com>
Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>

---------

Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com>
Co-authored-by: Derek Nola <derek.nola@suse.com>
2023-12-01 08:58:12 -08:00
Derek Nola
19c206d0cb
Update minimum ansible version requirements to avoid airgap error (#258)
* Update minimum ansible version requirements to avoid airgap error

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-30 12:32:19 -08:00
Derek Nola
7fcf82ac64
Rework iptables old version checks (#255)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-16 12:43:45 -08:00
Derek Nola
1e633c5ad1
Rework Role Structure (#254)
* Add more defaults
* Rename roles, covert download to airgap role
* Remove unnecessary gather_facts

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-16 12:03:07 -08:00
Derek Nola
52941b749b
Airgap Support (#253)
* Initial airgap support
* Support any of the compressed image formats
* Add airgap section to README
* Support Airgap SElinux RPM install

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-14 14:36:15 -08:00
Derek Nola
46a842a551
Support K3s config yaml (#252)
* Support K3s config yaml

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-13 14:09:15 -08:00
Derek Nola
bec34905c2 Only use iptables alternative on older iptables versions
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-10 15:25:10 -08:00
Derek Nola
3b9982013a Fix issue around using ip addresses in inventory, download and remove agent service properly
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-10 15:25:10 -08:00
Derek Nola
e01a8a2a8a
Extra Manifest delpoyment (#244)
* Allow additional manifests to be deployed

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-10 12:13:39 -08:00
Derek Nola
9d918c9da0 Handle apparmor for Debian 11 when parser not present
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-10 11:03:58 -08:00
Derek Nola
bfd030290d Add apparmor-parser support for SUSE
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-10 11:03:58 -08:00
Derek Nola
e9a283b48c
Minimal Firewall Exceptions (#242)
* Add rules to UFW firewall for basic K3s funtionality

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add firewalld exceptions

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 19:21:46 -08:00
Derek Nola
fd4e8bf70b
Allow SELinuix on RHEL family (#241)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 19:19:00 -08:00
Derek Nola
bb55bcf07a
Fix reboot handler calls (#239)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 13:56:22 -08:00
Derek Nola
45289ba7d9
Add support for Rocky, bump default install version (#238)
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 12:56:38 -08:00
Derek Nola
e6233d9f7d
Add support for Service Envs (#237)
* Add support for service ENVs
* Rename PR template
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 12:30:18 -08:00
Derek Nola
e864933b04
Add Upgrade Playbook (#236)
* Highlight node reqs.

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add upgrade playbook

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Move PR template

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 10:56:47 -08:00
Derek Nola
fd6f288b20
Fix K3s Path, Alternative folder in HA (#233)
* Readd #143 fix

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Add PR template

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-09 09:17:20 -08:00
Derek Nola
f369e3a015
Simplify reset playbook (#230)
* Simplify reset playbook

Signed-off-by: Derek Nola <derek.nola@suse.com>

* Cleanup ansible_user kubeconfig

Signed-off-by: Derek Nola <derek.nola@suse.com>

---------

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 16:26:26 -08:00
Derek Nola
20afd4f19e
Simplify K3s service startup for HA
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 15:16:28 -08:00
Derek Nola
565c9fa049
Enforce use of a defined token. Simplifies additional server and agent joining process.
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 14:38:57 -08:00
Derek Nola
9ecdc933ca
Add Vagrantfile for local testing
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 13:42:11 -08:00
Derek Nola
0cd9ffc17f
Use K3s install script instead of direct download
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 13:41:50 -08:00
Assaf Sapir
057b3bfc07
Add archlinux (aarch64) support (#146)
* Add archlinux (aarch64) support

Signed-off-by: Assaf Sapir <meijin007@gmail.com>
2023-11-08 10:31:51 -08:00
Derek Nola
83de43125b Lint fixes
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Nicholas Malcolm
8484c015d6 Fix k3s_server_location only working on default
- K3s has some absolute paths set in various places which cannot be
  changed. Using a symbolic link was the easiest fix. This is nice for
  running K3S on SBC that must boot to SD but K3S data should be stored
  on a faster drive.
- Other changes are for making the site playbook replayable without
  resetting the cluster. Ideally you can rerun it to check existing
  nodes or to add new ones.

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Nicholas Malcolm
7cc70ad609 HA fixes and code tweaks
- Reboot playbook updated for HA testing
- Small adjustment made after testing HA with playbook
- Fix reset playbook failing in some cases

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Nicholas Malcolm
cd725780f5 Move k3s_server_location to inventory vars
- All environemt variables are now in one place
- Add --data-dir option to agent and init  service

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Nicholas Malcolm
5b3e2a5db6 Reorganize server tasks, copy config to local
- Inital server starts first so it can grab the token for other servers and copy the config to localhost
- More cleanup of agent/server naming scheme

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Nicholas Malcolm
df67c61ba5 Add HA option, change to yaml inventory, cleanup
- HA option for multiple server nodes using embedded etcd
- Switch to yaml inventory file for easier editing and combining vars
- Update to full ansible module names
- Change master/node names to server/agent
- Cleanup small linting errors
- Add reboot playbook which staggers reboot to keep HA cluster up
- Move playbooks to playbook directory

Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-08 10:23:56 -08:00
Derek Nola
1031ea3ce2 Comply with ansible-lint
Signed-off-by: Derek Nola <derek.nola@suse.com>
2023-11-07 14:00:07 -08:00
Mark Hahl
6749ca5874
use full path for k3s binary (#143)
Signed-off-by: Mark Hahl <mark@hahl.id.au>
2023-11-07 10:37:24 -08:00
Nikoleta Verbeck
12db5ef1f1
Fixes related to K3s Issue https://github.com/k3s-io/k3s/issues/4234 (#204)
Signed-off-by: Nikoleta Verbeck <nerdynick@gmail.comn>
Co-authored-by: Nikoleta Verbeck <nerdynick@gmail.comn>
2023-11-07 09:55:02 -08:00
Razurac
8474a8b4e8
Update pre_req tasks (#128)
On Rhel 8.4 ansible_distribution is set to RedHat so the current when condition will fail
Added "RedHat" to the when condition.

Signed-off-by: Razurac <a.zelch@t-online.de>
2023-11-07 09:54:32 -08:00
Frank Villaro-Dixon
b1c8c063f7
k3s download: increase get_url timeout 10→120s (#213)
The default `get_url` module timeout is 10s. As the k3s binary is around
60MB, it can take some time to download on slow connections or when many
downloads are concurrent (multi-node install).
Increase the timeout a bit from 10s to 120s.

Signed-off-by: Frank Villaro-Dixon <frank@villaro-dixon.eu>
2023-11-07 09:54:21 -08:00
kcir
b65b610023
Fix Raspberry tasks for Debian (#151)
* Fix Raspberry tasks for Debian

Signed-off-by: Rick <r.wagenaar@icloud.com>
Signed-off-by: Rick <rick@kcir.nl>

* Move debian yaml files

Signed-off-by: Rick <r.wagenaar@icloud.com>
Signed-off-by: Rick <rick@kcir.nl>

* Add task for Debian to install iptables

Signed-off-by: Rick <rick@kcir.nl>

* Add check for cmdline.txt path for Debian

Signed-off-by: Rick <rick@kcir.nl>

* Remove Debian11 tasks file

Signed-off-by: Rick <rick@kcir.nl>

---------

Signed-off-by: Rick <r.wagenaar@icloud.com>
Signed-off-by: Rick <rick@kcir.nl>
Co-authored-by: Rick <r.wagenaar@icloud.com>
Co-authored-by: Rick <rick@kcir.nl>
2023-11-07 09:53:59 -08:00
Julien DOCHE
5f7bf0d388
Merge pull request #134 from clambin/ipv6
don't try to set ipv6 forward if ipv6 not enabled
2021-10-26 19:16:57 +02:00
clambin
402f83553e don't try to set ipv6 forward if ipv6 not enabled
Signed-off-by: clambin <christophe.lambin@gmail.com>
2021-07-10 15:13:08 +02:00