- name: 转换内核版本为浮点数 set_fact: KERNEL_VER: "{{ ansible_kernel.split('-')[0].split('.')[0]|int + ansible_kernel.split('-')[0].split('.')[1]|int/100 }}" - name: 检查内核版本>4.9 fail: msg="kernel {{ ansible_kernel }} is too old for cilium installing" when: "KERNEL_VER|float <= 4.09" - block: - name: 创建 cilium chart 个性化设置 template: src=values.yaml.j2 dest={{ cluster_dir }}/yml/cilium-values.yaml - name: helm 创建 cilium {{ cilium_ver }} shell: "{{ base_dir }}/bin/helm upgrade cilium --install \ -n kube-system -f {{ cluster_dir }}/yml/cilium-values.yaml \ {{ base_dir }}/roles/cilium/files/cilium-{{ cilium_ver }}.tgz" run_once: true connection: local - name: 下载client工具 copy: src={{ base_dir }}/bin/{{ item }} dest={{ bin_dir }}/{{ item }} mode=0755 with_items: - cilium - hubble # 删除原有cni配置 - name: 删除默认cni配置 file: path=/etc/cni/net.d/10-default.conf state=absent # 等待网络插件部署成功,视下载镜像速度而定 - name: 轮询等待cilium-node 运行,视下载镜像速度而定 shell: "{{ bin_dir }}/kubectl get pod -n kube-system -owide -lk8s-app=cilium|grep ' {{ inventory_hostname }} '|awk '{print $3}'" register: pod_status until: pod_status.stdout == "Running" retries: 15 delay: 8 ignore_errors: true # hubble-relay 可能需要重启一下 - name: 重启hubble-relay pod shell: "{{ base_dir }}/bin/kubectl -n kube-system scale deploy hubble-relay --replicas=0 && sleep 5 && \ {{ base_dir }}/bin/kubectl -n kube-system scale deploy hubble-relay --replicas=1" run_once: true connection: local when: "cilium_hubble_enabled|bool"