250 lines
12 KiB
YAML
250 lines
12 KiB
YAML
---
|
|
- name: Cilium | Start Resources
|
|
kube:
|
|
name: "{{ item.item.name }}"
|
|
namespace: "kube-system"
|
|
kubectl: "{{ bin_dir }}/kubectl"
|
|
resource: "{{ item.item.type }}"
|
|
filename: "{{ kube_config_dir }}/{{ item.item.name }}-{{ item.item.file }}"
|
|
state: "latest"
|
|
loop: "{{ cilium_node_manifests.results }}"
|
|
when: inventory_hostname == groups['kube_control_plane'][0] and not item is skipped
|
|
|
|
- name: Cilium | Wait for pods to run
|
|
command: "{{ kubectl }} -n kube-system get pods -l k8s-app=cilium -o jsonpath='{.items[?(@.status.containerStatuses[0].ready==false)].metadata.name}'" # noqa literal-compare
|
|
register: pods_not_ready
|
|
until: pods_not_ready.stdout.find("cilium")==-1
|
|
retries: "{{ cilium_rolling_restart_wait_retries_count | int }}"
|
|
delay: "{{ cilium_rolling_restart_wait_retries_delay_seconds | int }}"
|
|
failed_when: false
|
|
when: inventory_hostname == groups['kube_control_plane'][0]
|
|
|
|
- name: Cilium | Hubble install
|
|
kube:
|
|
name: "{{ item.item.name }}"
|
|
namespace: "kube-system"
|
|
kubectl: "{{ bin_dir }}/kubectl"
|
|
resource: "{{ item.item.type }}"
|
|
filename: "{{ kube_config_dir }}/addons/hubble/{{ item.item.name }}-{{ item.item.file }}"
|
|
state: "latest"
|
|
loop: "{{ cilium_hubble_manifests.results }}"
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0] and not item is skipped
|
|
- cilium_enable_hubble and cilium_hubble_install
|
|
|
|
- name: Cilium | Wait for CiliumLoadBalancerIPPool CRD to be present
|
|
command: "{{ kubectl }} wait --for condition=established --timeout=60s crd/ciliumloadbalancerippools.cilium.io"
|
|
register: cillium_lbippool_crd_ready
|
|
retries: "{{ cilium_rolling_restart_wait_retries_count | int }}"
|
|
delay: "{{ cilium_rolling_restart_wait_retries_delay_seconds | int }}"
|
|
failed_when: false
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cilium_loadbalancer_ip_pools is defined and (cilium_loadbalancer_ip_pools|length>0)
|
|
|
|
- name: Cilium | Create CiliumLoadBalancerIPPool manifests
|
|
template:
|
|
src: "{{ item.name }}/{{ item.file }}.j2"
|
|
dest: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
mode: "0644"
|
|
with_items:
|
|
- {name: cilium, file: cilium-loadbalancer-ip-pool.yml, type: CiliumLoadBalancerIPPool}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cillium_lbippool_crd_ready is defined and cillium_lbippool_crd_ready.rc is defined and cillium_lbippool_crd_ready.rc == 0
|
|
- cilium_loadbalancer_ip_pools is defined and (cilium_loadbalancer_ip_pools|length>0)
|
|
|
|
- name: Cilium | Apply CiliumLoadBalancerIPPool from cilium_loadbalancer_ip_pools
|
|
kube:
|
|
name: "{{ item.name }}"
|
|
kubectl: "{{ bin_dir }}/kubectl"
|
|
resource: "{{ item.type }}"
|
|
filename: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
state: "latest"
|
|
loop:
|
|
- {name: cilium, file: cilium-loadbalancer-ip-pool.yml, type: CiliumLoadBalancerIPPool}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cillium_lbippool_crd_ready is defined and cillium_lbippool_crd_ready.rc is defined and cillium_lbippool_crd_ready.rc == 0
|
|
- cilium_loadbalancer_ip_pools is defined and (cilium_loadbalancer_ip_pools|length>0)
|
|
|
|
- name: Cilium | Wait for CiliumBGPPeeringPolicy CRD to be present
|
|
command: "{{ kubectl }} wait --for condition=established --timeout=60s crd/ciliumbgppeeringpolicies.cilium.io"
|
|
register: cillium_bgpppolicy_crd_ready
|
|
retries: "{{ cilium_rolling_restart_wait_retries_count | int }}"
|
|
delay: "{{ cilium_rolling_restart_wait_retries_delay_seconds | int }}"
|
|
failed_when: false
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cilium_bgp_peering_policies is defined and (cilium_bgp_peering_policies|length>0)
|
|
|
|
- name: Cilium | Create CiliumBGPPeeringPolicy manifests
|
|
template:
|
|
src: "{{ item.name }}/{{ item.file }}.j2"
|
|
dest: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
mode: "0644"
|
|
with_items:
|
|
- {name: cilium, file: cilium-bgp-peering-policy.yml, type: CiliumBGPPeeringPolicy}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cillium_bgpppolicy_crd_ready is defined and cillium_bgpppolicy_crd_ready.rc is defined and cillium_bgpppolicy_crd_ready.rc == 0
|
|
- cilium_bgp_peering_policies is defined and (cilium_bgp_peering_policies|length>0)
|
|
|
|
- name: Cilium | Apply CiliumBGPPeeringPolicy from cilium_bgp_peering_policies
|
|
kube:
|
|
name: "{{ item.name }}"
|
|
kubectl: "{{ bin_dir }}/kubectl"
|
|
resource: "{{ item.type }}"
|
|
filename: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
state: "latest"
|
|
loop:
|
|
- {name: cilium, file: cilium-bgp-peering-policy.yml, type: CiliumBGPPeeringPolicy}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cillium_bgpppolicy_crd_ready is defined and cillium_bgpppolicy_crd_ready.rc is defined and cillium_bgpppolicy_crd_ready.rc == 0
|
|
- cilium_bgp_peering_policies is defined and (cilium_bgp_peering_policies|length>0)
|
|
|
|
- name: Cilium | Wait for CiliumBGPClusterConfig CRD to be present
|
|
command: "{{ kubectl }} wait --for condition=established --timeout=60s crd/ciliumbgpclusterconfigs.cilium.io"
|
|
register: cillium_bgpcconfig_crd_ready
|
|
retries: "{{ cilium_rolling_restart_wait_retries_count | int }}"
|
|
delay: "{{ cilium_rolling_restart_wait_retries_delay_seconds | int }}"
|
|
failed_when: false
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cilium_bgp_cluster_configs is defined and (cilium_bgp_cluster_configs|length>0)
|
|
|
|
- name: Cilium | Create CiliumBGPClusterConfig manifests
|
|
template:
|
|
src: "{{ item.name }}/{{ item.file }}.j2"
|
|
dest: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
mode: "0644"
|
|
with_items:
|
|
- {name: cilium, file: cilium-bgp-cluster-config.yml, type: CiliumBGPClusterConfig}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cillium_bgpcconfig_crd_ready is defined and cillium_bgpcconfig_crd_ready.rc is defined and cillium_bgpcconfig_crd_ready.rc == 0
|
|
- cilium_bgp_cluster_configs is defined and (cilium_bgp_cluster_configs|length>0)
|
|
|
|
- name: Cilium | Apply CiliumBGPClusterConfig from cilium_bgp_cluster_configs
|
|
kube:
|
|
name: "{{ item.name }}"
|
|
kubectl: "{{ bin_dir }}/kubectl"
|
|
resource: "{{ item.type }}"
|
|
filename: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
state: "latest"
|
|
loop:
|
|
- {name: cilium, file: cilium-bgp-cluster-config.yml, type: CiliumBGPClusterConfig}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cillium_bgpcconfig_crd_ready is defined and cillium_bgpcconfig_crd_ready.rc is defined and cillium_bgpcconfig_crd_ready.rc == 0
|
|
- cilium_bgp_cluster_configs is defined and (cilium_bgp_cluster_configs|length>0)
|
|
|
|
- name: Cilium | Wait for CiliumBGPPeerConfig CRD to be present
|
|
command: "{{ kubectl }} wait --for condition=established --timeout=60s crd/ciliumbgppeerconfigs.cilium.io"
|
|
register: cillium_bgppconfig_crd_ready
|
|
retries: "{{ cilium_rolling_restart_wait_retries_count | int }}"
|
|
delay: "{{ cilium_rolling_restart_wait_retries_delay_seconds | int }}"
|
|
failed_when: false
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cilium_bgp_peer_configs is defined and (cilium_bgp_peer_configs|length>0)
|
|
|
|
- name: Cilium | Create CiliumBGPPeerConfig manifests
|
|
template:
|
|
src: "{{ item.name }}/{{ item.file }}.j2"
|
|
dest: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
mode: "0644"
|
|
with_items:
|
|
- {name: cilium, file: cilium-bgp-peer-config.yml, type: CiliumBGPPeerConfig}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cillium_bgppconfig_crd_ready is defined and cillium_bgppconfig_crd_ready.rc is defined and cillium_bgppconfig_crd_ready.rc == 0
|
|
- cilium_bgp_peer_configs is defined and (cilium_bgp_peer_configs|length>0)
|
|
|
|
- name: Cilium | Apply CiliumBGPPeerConfig from cilium_bgp_peer_configs
|
|
kube:
|
|
name: "{{ item.name }}"
|
|
kubectl: "{{ bin_dir }}/kubectl"
|
|
resource: "{{ item.type }}"
|
|
filename: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
state: "latest"
|
|
loop:
|
|
- {name: cilium, file: cilium-bgp-peer-config.yml, type: CiliumBGPPeerConfig}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cillium_bgppconfig_crd_ready is defined and cillium_bgppconfig_crd_ready.rc is defined and cillium_bgppconfig_crd_ready.rc == 0
|
|
- cilium_bgp_peer_configs is defined and (cilium_bgp_peer_configs|length>0)
|
|
|
|
- name: Cilium | Wait for CiliumBGPAdvertisement CRD to be present
|
|
command: "{{ kubectl }} wait --for condition=established --timeout=60s crd/ciliumbgpadvertisements.cilium.io"
|
|
register: cillium_bgpadvert_crd_ready
|
|
retries: "{{ cilium_rolling_restart_wait_retries_count | int }}"
|
|
delay: "{{ cilium_rolling_restart_wait_retries_delay_seconds | int }}"
|
|
failed_when: false
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cilium_bgp_advertisements is defined and (cilium_bgp_advertisements|length>0)
|
|
|
|
- name: Cilium | Create CiliumBGPAdvertisement manifests
|
|
template:
|
|
src: "{{ item.name }}/{{ item.file }}.j2"
|
|
dest: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
mode: "0644"
|
|
with_items:
|
|
- {name: cilium, file: cilium-bgp-advertisement.yml, type: CiliumBGPAdvertisement}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cillium_bgpadvert_crd_ready is defined and cillium_bgpadvert_crd_ready.rc is defined and cillium_bgpadvert_crd_ready.rc == 0
|
|
- cilium_bgp_advertisements is defined and (cilium_bgp_advertisements|length>0)
|
|
|
|
- name: Cilium | Apply CiliumBGPAdvertisement from cilium_bgp_advertisements
|
|
kube:
|
|
name: "{{ item.name }}"
|
|
kubectl: "{{ bin_dir }}/kubectl"
|
|
resource: "{{ item.type }}"
|
|
filename: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
state: "latest"
|
|
loop:
|
|
- {name: cilium, file: cilium-bgp-advertisement.yml, type: CiliumBGPAdvertisement}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cillium_bgpadvert_crd_ready is defined and cillium_bgpadvert_crd_ready.rc is defined and cillium_bgpadvert_crd_ready.rc == 0
|
|
- cilium_bgp_advertisements is defined and (cilium_bgp_advertisements|length>0)
|
|
|
|
- name: Cilium | Wait for CiliumBGPNodeConfigOverride CRD to be present
|
|
command: "{{ kubectl }} wait --for condition=established --timeout=60s crd/ciliumbgpnodeconfigoverrides.cilium.io"
|
|
register: cilium_bgp_node_config_crd_ready
|
|
retries: "{{ cilium_rolling_restart_wait_retries_count | int }}"
|
|
delay: "{{ cilium_rolling_restart_wait_retries_delay_seconds | int }}"
|
|
failed_when: false
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cilium_bgp_advertisements is defined and (cilium_bgp_advertisements|length>0)
|
|
|
|
- name: Cilium | Create CiliumBGPNodeConfigOverride manifests
|
|
template:
|
|
src: "{{ item.name }}/{{ item.file }}.j2"
|
|
dest: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
mode: "0644"
|
|
with_items:
|
|
- {name: cilium, file: cilium-bgp-node-config-override.yml, type: CiliumBGPNodeConfigOverride}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cilium_bgp_node_config_crd_ready is defined and cilium_bgp_node_config_crd_ready.rc is defined and cilium_bgp_node_config_crd_ready.rc == 0
|
|
- cilium_bgp_node_config_overrides is defined and (cilium_bgp_node_config_overrides|length>0)
|
|
|
|
- name: Cilium | Apply CiliumBGPNodeConfigOverride from cilium_bgp_node_config_overrides
|
|
kube:
|
|
name: "{{ item.name }}"
|
|
kubectl: "{{ bin_dir }}/kubectl"
|
|
resource: "{{ item.type }}"
|
|
filename: "{{ kube_config_dir }}/{{ item.name }}-{{ item.file }}"
|
|
state: "latest"
|
|
loop:
|
|
- {name: cilium, file: cilium-bgp-node-config-override.yml, type: CiliumBGPNodeConfigOverride}
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|
|
- cilium_bgp_node_config_crd_ready is defined and cilium_bgp_node_config_crd_ready.rc is defined and cilium_bgp_node_config_crd_ready.rc == 0
|
|
- cilium_bgp_node_config_overrides is defined and (cilium_bgp_node_config_overrides|length>0)
|