mirror of https://github.com/easzlab/kubeasz.git
56 lines
2.0 KiB
YAML
56 lines
2.0 KiB
YAML
# https://docs.cilium.io/en/stable/installation/k8s-install-helm/#k8s-install-helm
|
|
- name: 转换内核版本为浮点数
|
|
set_fact:
|
|
KERNEL_VER: "{{ ansible_kernel.split('-')[0].split('.')[0]|int + ansible_kernel.split('-')[0].split('.')[1]|int/100 }}"
|
|
|
|
- name: 检查内核版本>4.9
|
|
fail: msg="kernel {{ ansible_kernel }} is too old for cilium installing"
|
|
when: "KERNEL_VER|float <= 4.09"
|
|
|
|
- block:
|
|
- name: 创建 cilium chart 个性化设置
|
|
template: src=values.yaml.j2 dest={{ cluster_dir }}/yml/cilium-values.yaml
|
|
|
|
- name: helm 删除 cilium {{ cilium_ver }}
|
|
shell: "{{ base_dir }}/bin/helm delete cilium -n kube-system || echo true; sleep 3"
|
|
tags: force_change_certs
|
|
when: 'CHANGE_CA|bool'
|
|
|
|
- name: helm 创建 cilium {{ cilium_ver }}
|
|
shell: "{{ base_dir }}/bin/helm upgrade cilium --install \
|
|
-n kube-system -f {{ cluster_dir }}/yml/cilium-values.yaml \
|
|
{{ base_dir }}/roles/cilium/files/cilium-{{ cilium_ver }}.tgz"
|
|
tags: force_change_certs
|
|
run_once: true
|
|
connection: local
|
|
|
|
- name: 下载client工具
|
|
copy: src={{ base_dir }}/bin/{{ item }} dest={{ bin_dir }}/{{ item }} mode=0755
|
|
with_items:
|
|
- cilium
|
|
- hubble
|
|
|
|
# 删除原有cni配置
|
|
- name: 删除默认cni配置
|
|
file: path=/etc/cni/net.d/10-default.conf state=absent
|
|
|
|
# 等待网络插件部署成功，视下载镜像速度而定
|
|
- name: 轮询等待cilium-node 运行
|
|
shell: "{{ base_dir }}/bin/kubectl get pod -n kube-system -owide -lk8s-app=cilium|grep ' {{ K8S_NODENAME }} '|awk '{print $3}'"
|
|
register: pod_status
|
|
until: pod_status.stdout == "Running"
|
|
retries: 15
|
|
delay: 8
|
|
ignore_errors: true
|
|
connection: local
|
|
tags: force_change_certs
|
|
|
|
# hubble-relay 可能需要重启一下
|
|
- name: 重启hubble-relay pod
|
|
shell: "{{ base_dir }}/bin/kubectl -n kube-system scale deploy hubble-relay --replicas=0 && sleep 5 && \
|
|
{{ base_dir }}/bin/kubectl -n kube-system scale deploy hubble-relay --replicas=1"
|
|
run_once: true
|
|
connection: local
|
|
when: "cilium_hubble_enabled|bool"
|
|
tags: force_change_certs
|