forked from tim/k3s-ansible
Timothy Stewart
87ea8160c1
- Retry transient k3s release downloads with bounded backoff.\n- Bound failure diagnostics and validate guest release connectivity.\n- Discover repository-owned Molecule state under the actual project root.
46 lines
1.5 KiB
YAML
46 lines
1.5 KiB
YAML
---
|
|
- name: Apply overrides
|
|
ansible.builtin.import_playbook: >-
|
|
{{ lookup("ansible.builtin.env", "MOLECULE_SCENARIO_DIRECTORY") }}/overrides.yml
|
|
|
|
- name: Network setup
|
|
hosts: all
|
|
tasks:
|
|
- name: Disable firewalld
|
|
when: ansible_distribution == "Rocky"
|
|
# Rocky Linux comes with firewalld enabled. It blocks some of the network
|
|
# connections needed for our k3s cluster. For our test setup, we just disable
|
|
# it since the VM host's firewall is still active for connections to and from
|
|
# the Internet.
|
|
# When building your own cluster, please DO NOT blindly copy this. Instead,
|
|
# please create a custom firewall configuration that fits your network design
|
|
# and security needs.
|
|
ansible.builtin.systemd:
|
|
name: firewalld
|
|
enabled: false
|
|
state: stopped
|
|
become: true
|
|
|
|
- name: Verify GitHub release host DNS
|
|
ansible.builtin.getent:
|
|
database: hosts
|
|
key: github.com
|
|
register: github_dns
|
|
retries: 6
|
|
delay: 5
|
|
until: github_dns is succeeded
|
|
|
|
- name: Verify k3s checksum URL is reachable
|
|
ansible.builtin.uri:
|
|
url: >-
|
|
https://github.com/k3s-io/k3s/releases/download/{{ k3s_version
|
|
}}/sha256sum-amd64.txt
|
|
method: HEAD
|
|
follow_redirects: safe
|
|
status_code: [200, 302]
|
|
timeout: 15
|
|
register: k3s_checksum_request
|
|
retries: 3
|
|
delay: 5
|
|
until: k3s_checksum_request.status in [200, 302]
|