mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2025-12-14 13:54:37 +03:00
Merge pull request #12093 from VannTen/cleanup/contrib
Cleanup old things in contrib/
This commit is contained in:
@@ -1,11 +0,0 @@
|
|||||||
# Kubespray on KVM Virtual Machines hypervisor preparation
|
|
||||||
|
|
||||||
A simple playbook to ensure your system has the right settings to enable Kubespray
|
|
||||||
deployment on VMs.
|
|
||||||
|
|
||||||
This playbook does not create Virtual Machines, nor does it run Kubespray itself.
|
|
||||||
|
|
||||||
## User creation
|
|
||||||
|
|
||||||
If you want to create a user for running Kubespray deployment, you should specify
|
|
||||||
both `k8s_deployment_user` and `k8s_deployment_user_pkey_path`.
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
#k8s_deployment_user: kubespray
|
|
||||||
#k8s_deployment_user_pkey_path: /tmp/ssh_rsa
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Prepare Hypervisor to later install kubespray VMs
|
|
||||||
hosts: localhost
|
|
||||||
gather_facts: false
|
|
||||||
become: true
|
|
||||||
vars:
|
|
||||||
bootstrap_os: none
|
|
||||||
roles:
|
|
||||||
- { role: kvm-setup }
|
|
||||||
@@ -1,30 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Install required packages
|
|
||||||
package:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: present
|
|
||||||
with_items:
|
|
||||||
- bind-utils
|
|
||||||
- ntp
|
|
||||||
when: ansible_os_family == "RedHat"
|
|
||||||
|
|
||||||
- name: Install required packages
|
|
||||||
apt:
|
|
||||||
upgrade: true
|
|
||||||
update_cache: true
|
|
||||||
cache_valid_time: 3600
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: present
|
|
||||||
install_recommends: false
|
|
||||||
with_items:
|
|
||||||
- dnsutils
|
|
||||||
- ntp
|
|
||||||
when: ansible_os_family == "Debian"
|
|
||||||
|
|
||||||
- name: Create deployment user if required
|
|
||||||
include_tasks: user.yml
|
|
||||||
when: k8s_deployment_user is defined
|
|
||||||
|
|
||||||
- name: Set proper sysctl values
|
|
||||||
import_tasks: sysctl.yml
|
|
||||||
@@ -1,46 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Load br_netfilter module
|
|
||||||
community.general.modprobe:
|
|
||||||
name: br_netfilter
|
|
||||||
state: present
|
|
||||||
register: br_netfilter
|
|
||||||
|
|
||||||
- name: Add br_netfilter into /etc/modules
|
|
||||||
lineinfile:
|
|
||||||
dest: /etc/modules
|
|
||||||
state: present
|
|
||||||
line: 'br_netfilter'
|
|
||||||
when: br_netfilter is defined and ansible_os_family == 'Debian'
|
|
||||||
|
|
||||||
- name: Add br_netfilter into /etc/modules-load.d/kubespray.conf
|
|
||||||
copy:
|
|
||||||
dest: /etc/modules-load.d/kubespray.conf
|
|
||||||
content: |-
|
|
||||||
### This file is managed by Ansible
|
|
||||||
br-netfilter
|
|
||||||
owner: root
|
|
||||||
group: root
|
|
||||||
mode: "0644"
|
|
||||||
when: br_netfilter is defined
|
|
||||||
|
|
||||||
|
|
||||||
- name: Enable net.ipv4.ip_forward in sysctl
|
|
||||||
ansible.posix.sysctl:
|
|
||||||
name: net.ipv4.ip_forward
|
|
||||||
value: 1
|
|
||||||
sysctl_file: "{{ sysctl_file_path }}"
|
|
||||||
state: present
|
|
||||||
reload: true
|
|
||||||
|
|
||||||
- name: Set bridge-nf-call-{arptables,iptables} to 0
|
|
||||||
ansible.posix.sysctl:
|
|
||||||
name: "{{ item }}"
|
|
||||||
state: present
|
|
||||||
value: 0
|
|
||||||
sysctl_file: "{{ sysctl_file_path }}"
|
|
||||||
reload: true
|
|
||||||
with_items:
|
|
||||||
- net.bridge.bridge-nf-call-arptables
|
|
||||||
- net.bridge.bridge-nf-call-ip6tables
|
|
||||||
- net.bridge.bridge-nf-call-iptables
|
|
||||||
when: br_netfilter is defined
|
|
||||||
@@ -1,47 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Create user {{ k8s_deployment_user }}
|
|
||||||
user:
|
|
||||||
name: "{{ k8s_deployment_user }}"
|
|
||||||
groups: adm
|
|
||||||
shell: /bin/bash
|
|
||||||
|
|
||||||
- name: Ensure that .ssh exists
|
|
||||||
file:
|
|
||||||
path: "/home/{{ k8s_deployment_user }}/.ssh"
|
|
||||||
state: directory
|
|
||||||
owner: "{{ k8s_deployment_user }}"
|
|
||||||
group: "{{ k8s_deployment_user }}"
|
|
||||||
mode: "0700"
|
|
||||||
|
|
||||||
- name: Configure sudo for deployment user
|
|
||||||
copy:
|
|
||||||
content: |
|
|
||||||
%{{ k8s_deployment_user }} ALL=(ALL) NOPASSWD: ALL
|
|
||||||
dest: "/etc/sudoers.d/55-k8s-deployment"
|
|
||||||
owner: root
|
|
||||||
group: root
|
|
||||||
mode: "0644"
|
|
||||||
|
|
||||||
- name: Write private SSH key
|
|
||||||
copy:
|
|
||||||
src: "{{ k8s_deployment_user_pkey_path }}"
|
|
||||||
dest: "/home/{{ k8s_deployment_user }}/.ssh/id_rsa"
|
|
||||||
mode: "0400"
|
|
||||||
owner: "{{ k8s_deployment_user }}"
|
|
||||||
group: "{{ k8s_deployment_user }}"
|
|
||||||
when: k8s_deployment_user_pkey_path is defined
|
|
||||||
|
|
||||||
- name: Write public SSH key
|
|
||||||
shell: "ssh-keygen -y -f /home/{{ k8s_deployment_user }}/.ssh/id_rsa \
|
|
||||||
> /home/{{ k8s_deployment_user }}/.ssh/authorized_keys"
|
|
||||||
args:
|
|
||||||
creates: "/home/{{ k8s_deployment_user }}/.ssh/authorized_keys"
|
|
||||||
when: k8s_deployment_user_pkey_path is defined
|
|
||||||
|
|
||||||
- name: Fix ssh-pub-key permissions
|
|
||||||
file:
|
|
||||||
path: "/home/{{ k8s_deployment_user }}/.ssh/authorized_keys"
|
|
||||||
mode: "0600"
|
|
||||||
owner: "{{ k8s_deployment_user }}"
|
|
||||||
group: "{{ k8s_deployment_user }}"
|
|
||||||
when: k8s_deployment_user_pkey_path is defined
|
|
||||||
@@ -1,51 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Check ansible version
|
|
||||||
import_playbook: kubernetes_sigs.kubespray.ansible_version
|
|
||||||
|
|
||||||
- name: Install mitogen
|
|
||||||
hosts: localhost
|
|
||||||
strategy: linear
|
|
||||||
vars:
|
|
||||||
mitogen_version: 0.3.2
|
|
||||||
mitogen_url: https://github.com/mitogen-hq/mitogen/archive/refs/tags/v{{ mitogen_version }}.tar.gz
|
|
||||||
ansible_connection: local
|
|
||||||
tasks:
|
|
||||||
- name: Create mitogen plugin dir
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
state: directory
|
|
||||||
mode: "0755"
|
|
||||||
become: false
|
|
||||||
loop:
|
|
||||||
- "{{ playbook_dir }}/plugins/mitogen"
|
|
||||||
- "{{ playbook_dir }}/dist"
|
|
||||||
|
|
||||||
- name: Download mitogen release
|
|
||||||
get_url:
|
|
||||||
url: "{{ mitogen_url }}"
|
|
||||||
dest: "{{ playbook_dir }}/dist/mitogen_{{ mitogen_version }}.tar.gz"
|
|
||||||
validate_certs: true
|
|
||||||
mode: "0644"
|
|
||||||
|
|
||||||
- name: Extract archive
|
|
||||||
unarchive:
|
|
||||||
src: "{{ playbook_dir }}/dist/mitogen_{{ mitogen_version }}.tar.gz"
|
|
||||||
dest: "{{ playbook_dir }}/dist/"
|
|
||||||
|
|
||||||
- name: Copy plugin
|
|
||||||
ansible.posix.synchronize:
|
|
||||||
src: "{{ playbook_dir }}/dist/mitogen-{{ mitogen_version }}/"
|
|
||||||
dest: "{{ playbook_dir }}/plugins/mitogen"
|
|
||||||
|
|
||||||
- name: Add strategy to ansible.cfg
|
|
||||||
community.general.ini_file:
|
|
||||||
path: ansible.cfg
|
|
||||||
mode: "0644"
|
|
||||||
section: "{{ item.section | d('defaults') }}"
|
|
||||||
option: "{{ item.option }}"
|
|
||||||
value: "{{ item.value }}"
|
|
||||||
with_items:
|
|
||||||
- option: strategy
|
|
||||||
value: mitogen_linear
|
|
||||||
- option: strategy_plugins
|
|
||||||
value: plugins/mitogen/ansible_mitogen/plugins/strategy
|
|
||||||
Reference in New Issue
Block a user