From 511e3680061148bebda0062c1ab269d51ee46123 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Fri, 12 May 2023 00:59:05 +0200
Subject: kubernetes: add network plugin cilium

---
 .../kubeadm/control-plane/tasks/net_cilium.yml     | 52 ++++++++++++++++++++++
 .../control-plane/tasks/net_kube-router.yml        |  2 +-
 2 files changed, 53 insertions(+), 1 deletion(-)
 create mode 100644 roles/kubernetes/kubeadm/control-plane/tasks/net_cilium.yml

(limited to 'roles/kubernetes/kubeadm/control-plane')

diff --git a/roles/kubernetes/kubeadm/control-plane/tasks/net_cilium.yml b/roles/kubernetes/kubeadm/control-plane/tasks/net_cilium.yml
new file mode 100644
index 00000000..4d535ed4
--- /dev/null
+++ b/roles/kubernetes/kubeadm/control-plane/tasks/net_cilium.yml
@@ -0,0 +1,52 @@
+---
+- name: install cilium cli
+  apt:
+    name: cilium-cli
+    state: present
+
+- name: check if cilium is already installed
+  check_mode: no
+  command: cilium version
+  failed_when: false
+  changed_when: false
+  register: cilium_version_result
+
+- name: install cilium onto the cluster
+  when: "'no cilium pods found' in cilium_version_result.stdout"
+  block:
+  - name: install cilium using cli
+    command: cilium install --version "v{{ kubernetes_network_plugin_version }}" --config "{% for name,value in kubernetes_cilium_config.items() %}{{ loop.first | ternary('',',') }}{{ name }}={{ value }}{% endfor %}"
+    register: cilium_install
+
+  always:
+  - name: dump output of cilium install to log file
+    when: cilium_install.changed
+    copy:
+      content: "{{ cilium_install.stdout }}\n"
+      dest: /etc/kubernetes/network-plugin/install.log
+
+  - name: dump error output of cilium install to log file
+    when: cilium_install.changed and cilium_install.stderr
+    copy:
+      content: "{{ cilium_install.stderr }}\n"
+      dest: /etc/kubernetes/network-plugin/install.errors
+
+## TODO: enable this once we have a working deployment
+# - name: install node-local dns cache
+#   when: kubernetes_enable_nodelocal_dnscache
+#   block:
+#   - name: generate node-local dns cache config
+#     template:
+#       src: net_cilium/node-local-dns.yml.j2
+#       dest: /etc/kubernetes/network-plugin/node-local-dns.yml
+
+#   - name: check if node-local dns cache is already installed
+#     check_mode: no
+#     command: kubectl --kubeconfig /etc/kubernetes/admin.conf diff -f /etc/kubernetes/network-plugin/node-local-dns.yml
+#     failed_when: false
+#     changed_when: false
+#     register: kube_node_local_dns_diff_result
+
+#   - name: install node-local dns cache
+#     when: kube_node_local_dns_diff_result.rc != 0
+#     command: kubectl --kubeconfig /etc/kubernetes/admin.conf apply -f /etc/kubernetes/network-plugin/node-local-dns.yml
diff --git a/roles/kubernetes/kubeadm/control-plane/tasks/net_kube-router.yml b/roles/kubernetes/kubeadm/control-plane/tasks/net_kube-router.yml
index aad6467b..dcf737ae 100644
--- a/roles/kubernetes/kubeadm/control-plane/tasks/net_kube-router.yml
+++ b/roles/kubernetes/kubeadm/control-plane/tasks/net_kube-router.yml
@@ -11,7 +11,7 @@
   changed_when: false
   register: kube_router_diff_result
 
-- name: install kube-router on to the cluster
+- name: install kube-router onto the cluster
   when: kube_router_diff_result.rc != 0
   command: kubectl --kubeconfig /etc/kubernetes/admin.conf apply -f /etc/kubernetes/network-plugin/config.yml
 
-- 
cgit v1.2.3