mirrors/k3s-ansible
1
0
Fork 1
mirror of https://github.com/k3s-io/k3s-ansible.git synced 2025-12-25 00:12:37 +01:00
Code Issues Packages Projects Releases Wiki Activity

Rework iptables old version checks (#255)

Browse Source 
Signed-off-by: Derek Nola <derek.nola@suse.com>
This commit is contained in:
Derek Nola
2023-11-16 12:43:45 -08:00
committed by GitHub
parent 1e633c5ad1
commit 7fcf82ac64
3 changed files with 20 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
roles/prereq/tasks/main.yml
View File

@@ -148,6 +148,22 @@
name: apparmor
state: present
- name: Gather the package facts
ansible.builtin.package_facts:
manager: auto
# Iptables v1.8.0-1.8.4 have a specific bug with K3s. https://github.com/k3s-io/k3s/issues/3117
- name: If iptables v1.8.0-1.8.4, warn user # noqa ignore-errors
when:
- ansible_facts.packages['iptables'] is defined
- ansible_facts.packages['iptables'][0]['version'] is version('1.8.5', '<')
- ansible_facts.packages['iptables'][0]['version'] is version('1.7.9', '>')
ansible.builtin.fail:
msg:
- "Warning: Iptables {{ ansible_facts.packages['iptables'][0]['version'] }} found."
- "Add '--prefer-bundled-bin' to extra_server_args variable to use the bundled iptables binary."
ignore_errors: true
- name: Add /usr/local/bin to sudo secure_path
ansible.builtin.lineinfile:
line: 'Defaults secure_path = /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin'