From 2b10d43fa1a5538a6bf638ef73f816169cde7cbd Mon Sep 17 00:00:00 2001 From: Matthias Riegler Date: Sun, 29 Sep 2019 00:19:18 +0200 Subject: [PATCH] CentOS/RHEL compatibility for Ansible roles - Setting IPv4 & IPv6 forwarding - Setting `sysctl:net.bridge.bridge-nf-call-iptables` and `bridge-nf-call-ip6tables` to enabled since it is disabled by default on some CentOS systems --- README.md | 2 +- roles/prereq/tasks/main.yml | 35 +++++++++++++++++++++++++++++++++++ site.yml | 1 + 3 files changed, 37 insertions(+), 1 deletion(-) create mode 100644 roles/prereq/tasks/main.yml diff --git a/README.md b/README.md index 55e9dc9..223e15d 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ Build a Kubernetes cluster using Ansible with k3s. The goal is easily install a - [X] Debian - [ ] Ubuntu -- [ ] CentOS +- [X] CentOS on processor architecture: diff --git a/roles/prereq/tasks/main.yml b/roles/prereq/tasks/main.yml new file mode 100644 index 0000000..f29796a --- /dev/null +++ b/roles/prereq/tasks/main.yml @@ -0,0 +1,35 @@ +--- +- name: Set SELinux to disabled state + selinux: + state: disabled + when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux' + + - name: Enable IPv4 forwarding + sysctl: + name: net.ipv4.ip_forward + value: "1" + state: present + reload: yes + + - name: Enable IPv6 forwarding + sysctl: + name: net.ipv6.conf.all.forwarding + value: "1" + state: present + reload: yes + + - name: Set bridge-nf-call-iptables (just to be sure) + sysctl: + name: net.bridge.bridge-nf-call-iptables + value: "1" + state: present + reload: yes + when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux' + + - name: Set bridge-nf-call-ip6tables (just to be sure) + sysctl: + name: net.bridge.bridge-nf-call-iptables + value: "1" + state: present + reload: yes + when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux' diff --git a/site.yml b/site.yml index f815c5c..70c3b75 100644 --- a/site.yml +++ b/site.yml @@ -4,6 +4,7 @@ gather_facts: yes become: yes roles: + - { role: prereq } - { role: download } - { role: raspbian }