130 lines
4.3 KiB
YAML
130 lines
4.3 KiB
YAML
---
|
|
- name: Init first server node
|
|
when: ansible_hostname == groups['server'][0]
|
|
block:
|
|
- name: Start temporary service for HA cluster
|
|
ansible.builtin.command:
|
|
cmd: >
|
|
systemd-run -p RestartSec=2 -p Restart=on-failure --unit=k3s-init k3s server
|
|
--cluster-init --tls-san {{ api_endpoint }} --data-dir {{ k3s_server_location }} {{ extra_server_args}}
|
|
# noqa: jinja[spacing]
|
|
creates: "{{ k3s_server_location }}/server/node-token"
|
|
when: groups['server'] | length > 1
|
|
|
|
- name: Start temporary service for single server cluster
|
|
ansible.builtin.command:
|
|
cmd: >
|
|
systemd-run -p RestartSec=2 -p Restart=on-failure --unit=k3s-init k3s server
|
|
--tls-san {{ api_endpoint }} --data-dir {{ k3s_server_location }} {{ extra_server_args }}
|
|
creates: "{{ k3s_server_location }}/server/node-token"
|
|
when: groups['server'] | length == 1
|
|
|
|
- name: Wait for node-token
|
|
ansible.builtin.wait_for:
|
|
path: "{{ k3s_server_location }}/server/node-token"
|
|
|
|
- name: Register node-token file access mode
|
|
ansible.builtin.stat:
|
|
path: "{{ k3s_server_location }}/server/node-token"
|
|
register: p
|
|
|
|
- name: Change file access node-token
|
|
ansible.builtin.file:
|
|
path: "{{ k3s_server_location }}/server/node-token"
|
|
mode: "g+rx,o+rx"
|
|
|
|
- name: Read node-token from server
|
|
ansible.builtin.slurp:
|
|
path: "{{ k3s_server_location }}/server/node-token"
|
|
register: node_token
|
|
|
|
- name: Store server node-token
|
|
ansible.builtin.set_fact:
|
|
token: "{{ node_token.content | b64decode | regex_replace('\n', '') }}"
|
|
|
|
- name: Restore node-token file access
|
|
ansible.builtin.file:
|
|
path: "{{ k3s_server_location }}/server/node-token"
|
|
mode: "{{ p.stat.mode }}"
|
|
|
|
- name: Create directory .kube
|
|
ansible.builtin.file:
|
|
path: ~{{ ansible_user }}/.kube
|
|
state: directory
|
|
owner: "{{ ansible_user }}"
|
|
mode: "u=rwx,g=rx,o="
|
|
|
|
- name: Copy config file to user home directory
|
|
ansible.builtin.copy:
|
|
src: /etc/rancher/k3s/k3s.yaml
|
|
dest: ~{{ ansible_user }}/.kube/config
|
|
remote_src: true
|
|
owner: "{{ ansible_user }}"
|
|
mode: "u=rw,g=,o="
|
|
|
|
- name: Change server to API endpoint instead of localhost
|
|
ansible.builtin.command: >-
|
|
k3s kubectl config set-cluster default
|
|
--server=https://{{ api_endpoint }}:{{ api_port }}
|
|
--kubeconfig ~{{ ansible_user }}/.kube/config
|
|
changed_when: true
|
|
|
|
- name: Copy kubectl config to local machine
|
|
ansible.builtin.fetch:
|
|
src: ~{{ ansible_user }}/.kube/config
|
|
dest: ~/.kube/config
|
|
flat: true
|
|
|
|
- name: Start other server if any and verify status
|
|
block:
|
|
- name: Init additonal server nodes
|
|
ansible.builtin.command:
|
|
cmd: >
|
|
systemd-run -p RestartSec=2 -p Restart=on-failure --unit=k3s-init k3s server
|
|
--token "{{ hostvars[groups['server'][0]]['token'] }}" --server https://{{ api_endpoint }}:{{ api_port }}
|
|
--tls-san {{ api_endpoint }} --data-dir {{ k3s_server_location }} {{ extra_server_args }}
|
|
creates: "{{ k3s_server_location }}/server/node-token"
|
|
when: ansible_hostname != groups['server'][0]
|
|
|
|
- name: Verify that all server nodes joined
|
|
when: (groups['server'] | length) > 1
|
|
ansible.builtin.command:
|
|
cmd: >
|
|
k3s kubectl get nodes -l "node-role.kubernetes.io/control-plane=true" -o=jsonpath="{.items[*].metadata.name}"
|
|
register: nodes
|
|
until: nodes.rc == 0 and (nodes.stdout.split() | length) == (groups['server'] | length)
|
|
retries: 20
|
|
delay: 10
|
|
changed_when: false
|
|
always:
|
|
- name: Kill the temporary init service
|
|
ansible.builtin.systemd:
|
|
name: k3s-init
|
|
state: stopped
|
|
failed_when: false
|
|
|
|
- name: Copy K3s service file
|
|
ansible.builtin.template:
|
|
src: "k3s-server.service.j2"
|
|
dest: "{{ systemd_dir }}/k3s-server.service"
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
register: k3s_service
|
|
|
|
- name: Enable and check K3s service
|
|
ansible.builtin.systemd:
|
|
name: k3s-server
|
|
daemon_reload: true
|
|
state: restarted
|
|
enabled: true
|
|
|
|
- name: Create symlinks
|
|
ansible.builtin.file:
|
|
src: /usr/local/bin/k3s
|
|
dest: /usr/local/bin/{{ item }}
|
|
state: link
|
|
with_items:
|
|
- kubectl
|
|
- crictl
|