klal

hosts_init.yml

@@ -65,7 +65,7 @@ datacenter:
             ansible_python_interpreter: /usr/bin/python3
             ansible_ssh_user: jd
             ansible_ssh_password: q
-            # ansible_become_method: su
+            ansible_become_method: su
             ansible_become_password: q
             ansible_ssh_pass: q
             ansible_become_user: root

roles/init/tasks/main.yml

@@ -9,6 +9,16 @@
       ansible.builtin.user:
         name: jd
         password: "{{ jd_password | password_hash('sha512') }}"
+    - name: "Ensure sudo binary  exist"
+      stat:
+        path: /usr/bin/sudo
+      register: sudo_binary
+    - name: "Install sudo if not present"
+      package:
+        name: sudo
+        state: present
+      when: not sudo_binary.stat.exists
+    
     - name: Check if group exists
       getent:
         database: group
@@ -23,7 +33,14 @@
         groups: sudo
         append: true
       when: group_check is succeeded
-
+    - name: Ensure directory sudoers.d exists
+      file:
+        path: /etc/sudoers.d
+        state: directory
+        owner: root
+        group: root
+        mode: '0755'
+  
     - name: Give jd passwordless sudo
       copy:
         dest: /etc/sudoers.d/jd

roles/kubernetes/tasks/Rocky.yml

@@ -68,7 +68,14 @@
         url: http://download.docker.com/linux/centos/docker-ce.repo
         dest: /etc/yum.repos.d/docker-ce.repo
         mode: '0644'
-
+    - name: Remove Docker containerd if present
+      dnf:
+        name:
+          - containerd.io
+          - docker-ce
+          - docker-ce-cli
+        state: absent
+      ignore_errors: true
     - name: Install containerd
       dnf:
         name: containerd.io