Setting up k8s workers

roles/githubixx.flanneld/tasks/main.yml

@@ -0,0 +1,93 @@
+---
+- name: Create Kubernetes config directory
+  file:
+    path: "{{k8s_conf_dir}}"
+    state: directory
+    mode: 0700
+    owner: root
+    group: root
+  tags:
+    - k8s-flannel
+
+- name: Copy etcd certificates
+  copy:
+    src: "{{k8s_ca_conf_directory}}/{{item}}"
+    dest: "{{k8s_conf_dir}}/{{item}}"
+    mode: 0640
+    owner: root
+    group: root
+  with_items:
+    - "{{etcd_certificates}}"
+  tags:
+    - k8s-flannel
+
+- name: Check if flannel network configuration in etcd is done
+  shell: "{{etcd_bin_dir}}/etcdctl --endpoints https://127.0.0.1:{{etcd_client_port}} --ca-file={{k8s_conf_dir}}/ca-etcd.pem --cert-file={{k8s_conf_dir}}/cert-etcd.pem --key-file={{k8s_conf_dir}}/cert-etcd-key.pem get {{flannel_etcd_prefix}}/config || true"
+  register: flannel_configured
+  run_once: true
+  delegate_to: "{{groups.k8s_etcd|first}}"
+  tags:
+    - k8s-flannel
+
+- name: Setup flannel network configuration in etcd if needed
+  shell: "{{etcd_bin_dir}}/etcdctl --endpoints https://127.0.0.1:{{etcd_client_port}} --ca-file={{k8s_conf_dir}}/ca-etcd.pem --cert-file={{k8s_conf_dir}}/cert-etcd.pem --key-file={{k8s_conf_dir}}/cert-etcd-key.pem set {{flannel_etcd_prefix}}/config '{\"Network\":\"{{flannel_ip_range}}\",\"Backend\":{\"Type\": \"{{flannel_backend_type}}\"}}'"
+  when: flannel_configured.stderr.find('Key not found') != -1
+  run_once: true
+  delegate_to: "{{groups.k8s_etcd|first}}"
+  tags:
+    - k8s-flannel
+
+- name: Downloading official flanneld binary
+  get_url:
+    url: https://github.com/coreos/flannel/releases/download/{{flannel_version}}/flanneld-amd64
+    dest: "{{flannel_bin_dir}}/flanneld"
+    mode: 0750
+  tags:
+    - k8s-flannel
+
+- name: Combine flannel_settings and flannel_settings_user (if defined)
+  set_fact:
+    flannel_settings: "{{flannel_settings | combine(flannel_settings_user|default({})) }}"
+  tags:
+    - k8s-flannel
+
+- name: Install systemd service for flanneld
+  template:
+    src: etc/systemd/system/flanneld.service.j2
+    dest: /etc/systemd/system/flanneld.service
+    owner: root
+    group: root
+    mode: 0644
+  notify:
+    - reload systemd
+    - restart flanneld
+  tags:
+    - k8s-flannel
+
+- name: Ensure CNI config directory
+  file:
+    path: "{{k8s_cni_conf_dir}}"
+    state: directory
+    mode: 0755
+    owner: root
+    group: root
+  tags:
+    - k8s-flannel
+
+- name: Install flanneld CNI config
+  template:
+    src: etc/cni/net.d/cni-flannel.conf.j2
+    dest: "{{k8s_cni_conf_dir}}/{{flannel_cni_conf_file}}.conf"
+    owner: root
+    group: root
+    mode: 0644
+  tags:
+    - k8s-flannel
+
+- name: Enable and start flanneld
+  service:
+    name: flanneld
+    enabled: yes
+    state: started
+  tags:
+    - k8s-flannel