Jon S. Stumpf
34bf054f94
Fixed #260 : k3s autocompletion is added to .bashrc only when necessary; ( #262 )
...
* Fixed #260 : k3s autocompletion is added to .bashrc only when necessary;
Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com >
* Remove Jinja template from name:
Co-authored-by: Derek Nola <derek.nola@suse.com >
Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com >
---------
Signed-off-by: Jon S. Stumpf <jon.stumpf@gmail.com >
Co-authored-by: Derek Nola <derek.nola@suse.com >
2023-12-01 08:58:12 -08:00
Derek Nola
19c206d0cb
Update minimum ansible version requirements to avoid airgap error ( #258 )
...
* Update minimum ansible version requirements to avoid airgap error
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-30 12:32:19 -08:00
Derek Nola
7fcf82ac64
Rework iptables old version checks ( #255 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-16 12:43:45 -08:00
Derek Nola
1e633c5ad1
Rework Role Structure ( #254 )
...
* Add more defaults
* Rename roles, covert download to airgap role
* Remove unnecessary gather_facts
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-16 12:03:07 -08:00
Derek Nola
52941b749b
Airgap Support ( #253 )
...
* Initial airgap support
* Support any of the compressed image formats
* Add airgap section to README
* Support Airgap SElinux RPM install
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-14 14:36:15 -08:00
Derek Nola
46a842a551
Support K3s config yaml ( #252 )
...
* Support K3s config yaml
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-13 14:09:15 -08:00
Derek Nola
bec34905c2
Only use iptables alternative on older iptables versions
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-10 15:25:10 -08:00
Derek Nola
3b9982013a
Fix issue around using ip addresses in inventory, download and remove agent service properly
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-10 15:25:10 -08:00
Derek Nola
e01a8a2a8a
Extra Manifest delpoyment ( #244 )
...
* Allow additional manifests to be deployed
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-10 12:13:39 -08:00
Derek Nola
9d918c9da0
Handle apparmor for Debian 11 when parser not present
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-10 11:03:58 -08:00
Derek Nola
bfd030290d
Add apparmor-parser support for SUSE
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-10 11:03:58 -08:00
Derek Nola
e9a283b48c
Minimal Firewall Exceptions ( #242 )
...
* Add rules to UFW firewall for basic K3s funtionality
Signed-off-by: Derek Nola <derek.nola@suse.com >
* Add firewalld exceptions
Signed-off-by: Derek Nola <derek.nola@suse.com >
---------
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-09 19:21:46 -08:00
Derek Nola
fd4e8bf70b
Allow SELinuix on RHEL family ( #241 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-09 19:19:00 -08:00
Derek Nola
bb55bcf07a
Fix reboot handler calls ( #239 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-09 13:56:22 -08:00
Derek Nola
45289ba7d9
Add support for Rocky, bump default install version ( #238 )
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-09 12:56:38 -08:00
Derek Nola
e6233d9f7d
Add support for Service Envs ( #237 )
...
* Add support for service ENVs
* Rename PR template
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-09 12:30:18 -08:00
Derek Nola
e864933b04
Add Upgrade Playbook ( #236 )
...
* Highlight node reqs.
Signed-off-by: Derek Nola <derek.nola@suse.com >
* Add upgrade playbook
Signed-off-by: Derek Nola <derek.nola@suse.com >
* Move PR template
Signed-off-by: Derek Nola <derek.nola@suse.com >
---------
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-09 10:56:47 -08:00
Derek Nola
fd6f288b20
Fix K3s Path, Alternative folder in HA ( #233 )
...
* Readd #143 fix
Signed-off-by: Derek Nola <derek.nola@suse.com >
* Add PR template
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-09 09:17:20 -08:00
Derek Nola
f369e3a015
Simplify reset playbook ( #230 )
...
* Simplify reset playbook
Signed-off-by: Derek Nola <derek.nola@suse.com >
* Cleanup ansible_user kubeconfig
Signed-off-by: Derek Nola <derek.nola@suse.com >
---------
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 16:26:26 -08:00
Derek Nola
20afd4f19e
Simplify K3s service startup for HA
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 15:16:28 -08:00
Derek Nola
565c9fa049
Enforce use of a defined token. Simplifies additional server and agent joining process.
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 14:38:57 -08:00
Derek Nola
9ecdc933ca
Add Vagrantfile for local testing
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 13:42:11 -08:00
Derek Nola
0cd9ffc17f
Use K3s install script instead of direct download
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 13:41:50 -08:00
Assaf Sapir
057b3bfc07
Add archlinux (aarch64) support ( #146 )
...
* Add archlinux (aarch64) support
Signed-off-by: Assaf Sapir <meijin007@gmail.com >
2023-11-08 10:31:51 -08:00
Derek Nola
83de43125b
Lint fixes
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 10:23:56 -08:00
Nicholas Malcolm
8484c015d6
Fix k3s_server_location only working on default
...
- K3s has some absolute paths set in various places which cannot be
changed. Using a symbolic link was the easiest fix. This is nice for
running K3S on SBC that must boot to SD but K3S data should be stored
on a faster drive.
- Other changes are for making the site playbook replayable without
resetting the cluster. Ideally you can rerun it to check existing
nodes or to add new ones.
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 10:23:56 -08:00
Nicholas Malcolm
7cc70ad609
HA fixes and code tweaks
...
- Reboot playbook updated for HA testing
- Small adjustment made after testing HA with playbook
- Fix reset playbook failing in some cases
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 10:23:56 -08:00
Nicholas Malcolm
cd725780f5
Move k3s_server_location to inventory vars
...
- All environemt variables are now in one place
- Add --data-dir option to agent and init service
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 10:23:56 -08:00
Nicholas Malcolm
5b3e2a5db6
Reorganize server tasks, copy config to local
...
- Inital server starts first so it can grab the token for other servers and copy the config to localhost
- More cleanup of agent/server naming scheme
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 10:23:56 -08:00
Nicholas Malcolm
df67c61ba5
Add HA option, change to yaml inventory, cleanup
...
- HA option for multiple server nodes using embedded etcd
- Switch to yaml inventory file for easier editing and combining vars
- Update to full ansible module names
- Change master/node names to server/agent
- Cleanup small linting errors
- Add reboot playbook which staggers reboot to keep HA cluster up
- Move playbooks to playbook directory
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-08 10:23:56 -08:00
Derek Nola
1031ea3ce2
Comply with ansible-lint
...
Signed-off-by: Derek Nola <derek.nola@suse.com >
2023-11-07 14:00:07 -08:00
Mark Hahl
6749ca5874
use full path for k3s binary ( #143 )
...
Signed-off-by: Mark Hahl <mark@hahl.id.au >
2023-11-07 10:37:24 -08:00
Nikoleta Verbeck
12db5ef1f1
Fixes related to K3s Issue https://github.com/k3s-io/k3s/issues/4234 ( #204 )
...
Signed-off-by: Nikoleta Verbeck <nerdynick@gmail.comn >
Co-authored-by: Nikoleta Verbeck <nerdynick@gmail.comn >
2023-11-07 09:55:02 -08:00
Razurac
8474a8b4e8
Update pre_req tasks ( #128 )
...
On Rhel 8.4 ansible_distribution is set to RedHat so the current when condition will fail
Added "RedHat" to the when condition.
Signed-off-by: Razurac <a.zelch@t-online.de >
2023-11-07 09:54:32 -08:00
Frank Villaro-Dixon
b1c8c063f7
k3s download: increase get_url timeout 10→120s ( #213 )
...
The default `get_url` module timeout is 10s. As the k3s binary is around
60MB, it can take some time to download on slow connections or when many
downloads are concurrent (multi-node install).
Increase the timeout a bit from 10s to 120s.
Signed-off-by: Frank Villaro-Dixon <frank@villaro-dixon.eu >
2023-11-07 09:54:21 -08:00
kcir
b65b610023
Fix Raspberry tasks for Debian ( #151 )
...
* Fix Raspberry tasks for Debian
Signed-off-by: Rick <r.wagenaar@icloud.com >
Signed-off-by: Rick <rick@kcir.nl >
* Move debian yaml files
Signed-off-by: Rick <r.wagenaar@icloud.com >
Signed-off-by: Rick <rick@kcir.nl >
* Add task for Debian to install iptables
Signed-off-by: Rick <rick@kcir.nl >
* Add check for cmdline.txt path for Debian
Signed-off-by: Rick <rick@kcir.nl >
* Remove Debian11 tasks file
Signed-off-by: Rick <rick@kcir.nl >
---------
Signed-off-by: Rick <r.wagenaar@icloud.com >
Signed-off-by: Rick <rick@kcir.nl >
Co-authored-by: Rick <r.wagenaar@icloud.com >
Co-authored-by: Rick <rick@kcir.nl >
2023-11-07 09:53:59 -08:00
Julien DOCHE
5f7bf0d388
Merge pull request #134 from clambin/ipv6
...
don't try to set ipv6 forward if ipv6 not enabled
2021-10-26 19:16:57 +02:00
clambin
402f83553e
don't try to set ipv6 forward if ipv6 not enabled
...
Signed-off-by: clambin <christophe.lambin@gmail.com >
2021-07-10 15:13:08 +02:00
clambin
98d388c9fa
support 'k3s server --data-dir' to put k3s server files in a non-standard location
...
Signed-off-by: clambin <christophe.lambin@gmail.com >
2021-07-10 15:10:53 +02:00
Julien DOCHE
ef8d3a1949
Merge pull request #96 from tomasz-kuzemko/patch-1
...
Set service file mode -x
2021-02-23 16:30:42 +01:00
Julien DOCHE
88e1a43543
Make sure the reset role can be run with --check
...
We need to compute what mountpoints would be unmounted even when running with
--check
Signed-off-by: Julien DOCHE <julien.doche@gmail.com >
2021-02-19 00:19:50 +01:00
Julien DOCHE
54629a46bd
Change reset deletion order to avoid racecondition
...
If the k3s binary is launched after the deletion of `/var/lib/rancher/k3s`, k3s
will automatically create this directory. This change deletes the k3s binary
first so that it cannot be called after `/var/lib/rancher/k3s` is deleted
Signed-off-by: Julien DOCHE <julien.doche@gmail.com >
2021-02-19 00:12:51 +01:00
Staf Wagemakers
fe7bdf8cda
Reorganize the filesystem umount order.
...
* Clean /var/lib/kubelet before /var/lib/rancher/k3s.
* Umount the filesystem tree in reverse order, to ensure the root
is umounted last.
Signed-off-by: Staf Wagemakers <staf@wagemakers.be >
2021-01-24 11:04:30 +01:00
kopwei
7e38173d31
Correct repo path in downloading URL
...
Fix #102 , use k3s-io/k3s instead of rancher/k3s
Signed-off-by: kopwei <kopkop@gmail.com >
2020-12-02 15:06:24 +00:00
Tomasz Kuzemko
29e6acb7e7
Set service file mode -x
...
Systemd service files should not be executable
2020-10-17 23:55:12 +02:00
Julien DOCHE
721c348702
Merge pull request #79 from stafwag/master
...
Moved Raspberry Pi specifics settings to raspberrypi role
2020-09-27 18:59:18 +02:00
Julien DOCHE
a066c77ab5
Merge pull request #80 from jeffspahr/master
...
Fix umount_with_children typo
2020-09-27 18:47:04 +02:00
Lennart Jern
ca7c25b81c
Fix linting errors
2020-09-22 21:08:35 +03:00
Lennart Jern
6873913124
Use checksum with get_url
...
When the checksum is used there is no need to delete the binary first,
as it will be compared to the checksum and downloaded and replaced only
as needed.
2020-09-20 21:19:44 +03:00
jeffspahr
cf65304039
Fix umount_with_children typo
2020-08-16 21:26:25 -04:00