jaydee/ansible
1
0
Fork 0
mirror of https://gitlab.sectorq.eu/jaydee/ansible.git synced 2026-09-08 21:27:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

build

Browse Source
This commit is contained in:
jaydee
2026-05-21 15:45:51 +02:00
parent f6032cdddf
commit 9096224922
1 changed files with 13 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/kubernetes/tasks/Rocky.yml
+13 -12
View File
@@ -18,10 +18,6 @@
XDG_CONFIG_HOME: /home/jd/.config XDG_CONFIG_HOME: /home/jd/.config
KUBECONFIG: "{{ kubeconfig }}" KUBECONFIG: "{{ kubeconfig }}"
block: block:
- name: Facts
ansible.builtin.setup:
when: ansible_facts.architecture is not defined
- name: Get root mount - name: Get root mount
set_fact: set_fact:
root_mount: "{{ ansible_mounts | selectattr('mount', 'equalto', '/') | first }}" root_mount: "{{ ansible_mounts | selectattr('mount', 'equalto', '/') | first }}"
@@ -161,6 +157,11 @@
enabled: yes enabled: yes
state: started state: started
- name: Check if firewalld is installed
ansible.builtin.command: rpm -q firewalld
register: firewalld_check
ignore_errors: true
- name: Ensure firewalld is running - name: Ensure firewalld is running
ansible.builtin.service: ansible.builtin.service:
name: firewalld name: firewalld
@@ -168,7 +169,7 @@
enabled: true enabled: true
when: when:
- inventory_hostname.endswith('-vm01.home.lan') - inventory_hostname.endswith('-vm01.home.lan')
- "'firewalld' in ansible_facts.packages" - firewalld_check.rc == 0
- name: Open Kubernetes API server port (6443) - name: Open Kubernetes API server port (6443)
ansible.posix.firewalld: ansible.posix.firewalld:
@@ -178,7 +179,7 @@
immediate: yes immediate: yes
when: when:
- inventory_hostname.endswith('-vm01.home.lan') - inventory_hostname.endswith('-vm01.home.lan')
- "'firewalld' in ansible_facts.packages" - firewalld_check.rc == 0
- name: Open etcd ports (2379-2380) - name: Open etcd ports (2379-2380)
@@ -189,7 +190,7 @@
immediate: yes immediate: yes
when: when:
- inventory_hostname.endswith('-vm01.home.lan') - inventory_hostname.endswith('-vm01.home.lan')
- "'firewalld' in ansible_facts.packages" - firewalld_check.rc == 0
- name: Open kubelet and scheduler ports (10250-10252) - name: Open kubelet and scheduler ports (10250-10252)
ansible.posix.firewalld: ansible.posix.firewalld:
@@ -198,7 +199,7 @@
state: enabled state: enabled
immediate: yes immediate: yes
when: when:
- "'firewalld' in ansible_facts.packages" - firewalld_check.rc == 0
- name: Restart containerd - name: Restart containerd
systemd: systemd:
@@ -325,7 +326,7 @@
state: enabled state: enabled
immediate: yes immediate: yes
when: when:
- "'firewalld' in ansible_facts.packages" - firewalld_check.rc == 0
- name: Allow UDP 8472 from 192.168.77.0/24 - name: Allow UDP 8472 from 192.168.77.0/24
firewalld: firewalld:
@@ -334,7 +335,7 @@
state: enabled state: enabled
immediate: yes immediate: yes
when: when:
- "'firewalld' in ansible_facts.packages" - firewalld_check.rc == 0
- name: Add flannel.1 interface to trusted zone - name: Add flannel.1 interface to trusted zone
firewalld: firewalld:
@@ -343,7 +344,7 @@
state: enabled state: enabled
immediate: yes immediate: yes
when: when:
- "'firewalld' in ansible_facts.packages" - firewalld_check.rc == 0
- name: Add cni0 interface to trusted zone - name: Add cni0 interface to trusted zone
firewalld: firewalld:
@@ -352,7 +353,7 @@
state: enabled state: enabled
immediate: yes immediate: yes
when: when:
- "'firewalld' in ansible_facts.packages" - firewalld_check.rc == 0
- name: Ensure firewalld is restarted - name: Ensure firewalld is restarted
ansible.builtin.service: ansible.builtin.service: