Transition to k3s installation and uninstall scripts (techno-tim#108)

.github/ISSUE_TEMPLATE.md

@@ -33,7 +33,6 @@ Hardware:
 ```yml
 k3s_version: ""
 ansible_user: NA
-systemd_dir: ""
 
 flannel_iface: ""
 

.gitignore

@@ -1,3 +1,4 @@
 .env/
+.vagrant
 *.log
 ansible.cfg

README.md

@@ -19,6 +19,7 @@ Build a Kubernetes cluster using Ansible with k3s. The goal is easily install a
 - [x] Debian (tested on version 11)
 - [x] Ubuntu (tested on version 22.04)
 - [x] Rocky (tested on version 9)
+- [x] Alpine (tested on version 3.17)
 
 on processor architecture:
 

inventory/sample/group_vars/all.yml

@@ -1,8 +1,7 @@
 ---
-k3s_version: v1.25.9+k3s1
+k3s_version: v1.25.11+k3s1
 # this is the user that has ssh access to these machines
 ansible_user: ansibleuser
-systemd_dir: /etc/systemd/system
 
 # Set your timezone
 system_timezone: "Your/Timezone"

inventory/sample/hosts.ini

@@ -6,6 +6,7 @@
 [node]
 192.168.30.41
 192.168.30.42
+192.168.30.43
 
 # only required if proxmox_lxc_configure: true
 # must contain all proxmox instances that have a master or worker node

molecule/default/molecule.yml

@@ -3,6 +3,7 @@ dependency:
  name: galaxy
 driver:
  name: vagrant
+ provision: true
 platforms:
 
  - name: control1
@@ -70,6 +71,19 @@ platforms:
  - network_name: private_network
  ip: 192.168.30.42
 
+ - name: node3
+ box: generic/alpine317
+ instance_raw_config_args:
+ - 'vm.provision :shell, inline: "apk add --update --no-cache python3"'
+ memory: 2048
+ cpus: 2
+ groups:
+ - k3s_cluster
+ - node
+ interfaces:
+ - network_name: private_network
+ ip: 192.168.30.43
+
 provisioner:
  name: ansible
  playbooks:

roles/k3s/master/defaults/main.yml

@@ -11,6 +11,5 @@ server_init_args: >-
  {% else %}
  --server https://{{ hostvars[groups['master'][0]].k3s_node_ip | split(",") | first | ansible.utils.ipwrap }}:6443
  {% endif %}
- --token {{ k3s_token }}
  {% endif %}
  {{ extra_server_args | default('') }}

roles/k3s/master/tasks/fetch_k3s_init_logs.yml → roles/k3s/master/tasks/fetch_k3s_logs.yml

@@ -1,12 +1,12 @@
 ---
-# Download logs of k3s-init.service from the nodes to localhost.
+# Download logs of k3s.service from the nodes to localhost.
 # Note that log_destination must be set.
 
-- name: Fetch k3s-init.service logs
+- name: Fetch k3s.service logs
  ansible.builtin.command:
- cmd: journalctl --all --unit=k3s-init.service
+ cmd: journalctl --all --unit=k3s.service
  changed_when: false
- register: k3s_init_log
+ register: k3s_log
 
 - name: Create {{ log_destination }}
  delegate_to: localhost
@@ -22,7 +22,7 @@
  become: false
  ansible.builtin.template:
  src: content.j2
- dest: "{{ log_destination }}/k3s-init@{{ ansible_hostname }}.log"
+ dest: "{{ log_destination }}/k3s@{{ ansible_hostname }}.log"
  mode: 0644
  vars:
- content: "{{ k3s_init_log.stdout }}"
+ content: "{{ k3s_log.stdout }}"

roles/k3s/master/tasks/main.yml

@@ -1,35 +1,28 @@
 ---
 
-- name: Clean previous runs of k3s-init
- systemd:
- name: k3s-init
- state: stopped
- failed_when: false
+- name: Download install script
+ ansible.builtin.get_url:
+ url: https://get.k3s.io
+ dest: "{{ ansible_user_dir }}/install_k3s.sh"
+  mode: 744
 
-- name: Clean previous runs of k3s-init
- command: systemctl reset-failed k3s-init
+- name: Install k3s
+ command:
+ cmd: "./install_k3s.sh {{ server_init_args }}"
+ environment:
+ INSTALL_K3S_VERSION: "{{ k3s_version }}"
+ K3S_TOKEN: "{{ k3s_token }}"
  failed_when: false
- changed_when: false
- args:
- warn: false # The ansible systemd module does not support reset-failed
 
 - name: Deploy vip manifest
  include_tasks: vip.yml
 
 - name: Deploy metallb manifest
  include_tasks: metallb.yml
 
-- name: Init cluster inside the transient k3s-init service
- command:
- cmd: "systemd-run -p RestartSec=2 \
- -p Restart=on-failure \
- --unit=k3s-init \
- k3s server {{ server_init_args }}"
- creates: "{{ systemd_dir }}/k3s.service"
-
 - name: Verification
  block:
- - name: Verify that all nodes actually joined (check k3s-init.service if this fails)
+ - name: Verify that all nodes actually joined (check k3s.service if this fails)
  command:
  cmd: k3s kubectl get nodes -l "node-role.kubernetes.io/master=true" -o=jsonpath="{.items[*].metadata.name}"
  register: nodes
@@ -38,63 +31,14 @@
  delay: 10
  changed_when: false
  always:
- - name: Save logs of k3s-init.service
- include_tasks: fetch_k3s_init_logs.yml
+ - name: Save logs of k3s.service
+ include_tasks: fetch_k3s_logs.yml
  when: log_destination
  vars:
  log_destination: >-
  {{ lookup('ansible.builtin.env', 'ANSIBLE_K3S_LOG_DIR', default=False) }}
- - name: Kill the temporary service used for initialization
- systemd:
- name: k3s-init
- state: stopped
- failed_when: false
  when: not ansible_check_mode
 
-- name: Copy K3s service file
- register: k3s_service
- template:
- src: "k3s.service.j2"
- dest: "{{ systemd_dir }}/k3s.service"
- owner: root
- group: root
- mode: 0644
-
-- name: Enable and check K3s service
- systemd:
- name: k3s
- daemon_reload: yes
- state: restarted
- enabled: yes
-
-- name: Wait for node-token
- wait_for:
- path: /var/lib/rancher/k3s/server/node-token
-
-- name: Register node-token file access mode
- stat:
- path: /var/lib/rancher/k3s/server
- register: p
-
-- name: Change file access node-token
- file:
- path: /var/lib/rancher/k3s/server
- mode: "g+rx,o+rx"
-
-- name: Read node-token from master
- slurp:
- src: /var/lib/rancher/k3s/server/node-token
- register: node_token
-
-- name: Store Master node-token
- set_fact:
- token: "{{ node_token.content | b64decode | regex_replace('\n', '') }}"
-
-- name: Restore node-token file access
- file:
- path: /var/lib/rancher/k3s/server
- mode: "{{ p.stat.mode }}"
-
 - name: Create directory .kube
  file:
  path: "{{ ansible_user_dir }}/.kube"
@@ -124,18 +68,6 @@
  # would be undefined. This will not be the case during playbook execution.
  # noqa jinja[invalid]
 
-- name: Create kubectl symlink
- file:
- src: /usr/local/bin/k3s
- dest: /usr/local/bin/kubectl
- state: link
-
-- name: Create crictl symlink
- file:
- src: /usr/local/bin/k3s
- dest: /usr/local/bin/crictl
- state: link
-
 - name: Get contents of manifests folder
  find:
  paths: /var/lib/rancher/k3s/server/manifests

roles/k3s/node/tasks/main.yml

@@ -1,16 +1,15 @@
 ---
 
-- name: Copy K3s service file
- template:
- src: "k3s.service.j2"
- dest: "{{ systemd_dir }}/k3s-node.service"
- owner: root
- group: root
- mode: 0755
+- name: Download install script
+ ansible.builtin.get_url:
+ url: https://get.k3s.io
+ dest: "{{ ansible_user_dir }}/install_k3s.sh"
+ mode: 744
 
-- name: Enable and check K3s service
- systemd:
- name: k3s-node
- daemon_reload: yes
- state: restarted
- enabled: yes
+- name: Install k3s
+ command:
+ cmd: "./install_k3s.sh {{ extra_agent_args | default('') }}"
+ environment:
+ INSTALL_K3S_VERSION: "{{ k3s_version }}"
+ K3S_TOKEN: "{{ k3s_token }}"
+ K3S_URL: https://{{ apiserver_endpoint | ansible.utils.ipwrap }}:6443