Update a boatload of ansible stuff

2025-08-16 22:16:48 -03:00
parent d39b06eb12
commit 455dc27743
32 changed files with 27146 additions and 102 deletions
@@ -0,0 +1,116 @@
+- name: Download K3s Setup Script and K8s Python Lib on All Nodes
+  hosts: all
+  become: true
+  strategy: linear
+  tasks:
+    - name: Install curl
+      ansible.builtin.apt:
+        name: curl
+        state: present
+      when: ansible_os_family == "Debian"
+
+    - name: Download k3s install script
+      ansible.builtin.get_url:
+        url: https://get.k3s.io
+        dest: /tmp/k3s_install.sh
+        mode: '0755'
+
+    - name: Install Python Kubernetes client
+      ansible.builtin.apt:
+        name: python3-kubernetes
+        state: present
+
+    - name: Disable UFW
+      ansible.builtin.command: ufw disable
+      changed_when: false
+
+- name: Set up K3s on Init Node
+  hosts: init
+  become: true
+  strategy: linear
+  tasks:
+    - name: Run k3s Installer
+      ansible.builtin.shell: |
+        INSTALL_K3S_EXEC="server --tls-san {{ ansible_host }} --flannel-backend=wireguard-native --cluster-init" \
+        sh /tmp/k3s_install.sh
+      args:
+        creates: /usr/local/bin/k3s
+
+    - name: Ensure K3s Service is Started and Enabled
+      ansible.builtin.systemd:
+        name: k3s
+        enabled: true
+        state: started
+
+    - name: Get Joining Token
+      ansible.builtin.command: cat /var/lib/rancher/k3s/server/node-token
+      register: k3s_token
+      run_once: true
+      tags: skip_ansible_lint
+      changed_when: false
+
+- name: Set up K3s on Master Nodes
+  hosts: master
+  become: true
+  strategy: linear
+  tasks:
+    - name: Run k3s Installer
+      ansible.builtin.shell: |
+        INSTALL_K3S_EXEC="server --flannel-backend=wireguard-native --tls-san {{ ansible_host }}" \
+        K3S_URL="https://{{ hostvars[groups['init'][0]].ansible_host }}:6443" \
+        K3S_TOKEN="{{ hostvars[groups['init'][0]].k3s_token.stdout }}" sh /tmp/k3s_install.sh
+      args:
+        creates: /usr/local/bin/k3s
+
+    - name: Ensure k3s service is started and enabled
+      ansible.builtin.systemd:
+        name: k3s
+        enabled: true
+        state: started
+
+- name: Set up K3s on Worker Nodes
+  hosts: worker
+  become: true
+  strategy: linear
+  tasks:
+    - name: Run k3s Installer
+      ansible.builtin.shell: |
+        INSTALL_K3S_EXEC="agent" K3S_URL="https://{{ hostvars[groups['init'][0]].ansible_host }}:6443" \
+        K3S_TOKEN="{{ hostvars[groups['init'][0]].k3s_token.stdout }}" sh /tmp/k3s_install.sh
+      args:
+        creates: /usr/local/bin/k3s
+
+    - name: Ensure k3s service is started and enabled
+      ansible.builtin.systemd:
+        name: k3s-agent
+        enabled: true
+        state: started
+
+- name: Install Helm in All Nodes
+  hosts: all
+  become: true
+  strategy: linear
+  tasks:
+    - name: Download Helm Installation Script
+      ansible.builtin.get_url:
+        url: https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3
+        dest: /tmp/get_helm.sh
+        mode: '0755'
+
+    - name: Run helm installer
+      ansible.builtin.command: /tmp/get_helm.sh
+      args:
+        creates: /usr/local/bin/helm
+
+- name: Wait for All K3s Nodes to Become Ready
+  hosts: init
+  become: true
+  tasks:
+    - name: Wait until all nodes report Ready
+      ansible.builtin.shell: |
+        kubectl wait --for=condition=Ready node --all --timeout=10m
+      register: wait_nodes
+      retries: 5
+      delay: 30
+      until: wait_nodes.rc == 0
+      changed_when: false