diff options
| author | Christian Pointner <equinox@spreadspace.org> | 2020-05-26 18:08:10 +0200 |
|---|---|---|
| committer | Christian Pointner <equinox@spreadspace.org> | 2020-06-17 00:04:40 +0200 |
| commit | 4fd722c4c12b441d0857c5bc29d1cd43df64b9b7 (patch) | |
| tree | 4a4fd150d9faebc3358fcaf7d608178550e65e0f /roles/kubernetes/kubeadm/base/tasks | |
| parent | add ch-equinox-ws to managment vlan (diff) | |
finalize handling of network plugins. (needs testing)
Diffstat (limited to 'roles/kubernetes/kubeadm/base/tasks')
| -rw-r--r-- | roles/kubernetes/kubeadm/base/tasks/main.yml | 12 | ||||
| -rw-r--r-- | roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml | 7 | ||||
| -rw-r--r-- | roles/kubernetes/kubeadm/base/tasks/net_none.yml | 7 |
3 files changed, 24 insertions, 2 deletions
diff --git a/roles/kubernetes/kubeadm/base/tasks/main.yml b/roles/kubernetes/kubeadm/base/tasks/main.yml index 2d2bd324..7f2e02c2 100644 --- a/roles/kubernetes/kubeadm/base/tasks/main.yml +++ b/roles/kubernetes/kubeadm/base/tasks/main.yml @@ -59,5 +59,13 @@ content: | alias hatop="hatop -s /var/run/haproxy/admin.sock" -# - name: prepare network plugin -# include_tasks: "net_{{ kubernetes_network_plugin }}.yml" +## loading the modules temporarly because kubeadm will complain if they are not there +# but i don't think it is necessary to make this persistent, also ignoring changes here +- name: load module br_netfilter to satisfy kubeadm init/join + modprobe: + name: br_netfilter + state: present + changed_when: false + +- name: prepare network plugin + include_tasks: "net_{{ kubernetes_network_plugin }}.yml" diff --git a/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml b/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml new file mode 100644 index 00000000..0924c458 --- /dev/null +++ b/roles/kubernetes/kubeadm/base/tasks/net_kubeguard.yml @@ -0,0 +1,7 @@ +--- +- name: make sure kubernetes_network_plugin_replaces_kube_proxy is not set + run_once: yes + assert: + msg: "this network plugin can not replace kube-proxy please set kubernetes_network_plugin_replaces_kube_proxy to false." + that: + - not kubernetes_network_plugin_replaces_kube_proxy diff --git a/roles/kubernetes/kubeadm/base/tasks/net_none.yml b/roles/kubernetes/kubeadm/base/tasks/net_none.yml new file mode 100644 index 00000000..0924c458 --- /dev/null +++ b/roles/kubernetes/kubeadm/base/tasks/net_none.yml @@ -0,0 +1,7 @@ +--- +- name: make sure kubernetes_network_plugin_replaces_kube_proxy is not set + run_once: yes + assert: + msg: "this network plugin can not replace kube-proxy please set kubernetes_network_plugin_replaces_kube_proxy to false." + that: + - not kubernetes_network_plugin_replaces_kube_proxy |