feat!: Rewrite configure script in ansible (#822)

* feat: smol changes Signed-off-by: Devin Buhl <devin@buhl.casa> * feat!: Rewrite configure script in ansible Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: add comment for real path Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: verification is done Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: do not need net common Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up old comments Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up old comments Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: finish up ansible host generation and more Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: backup/restore sops config between tasks Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up test comments Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: use ansible template on template Signed-off-by: Devin Buhl <devin@buhl.casa> * Update template/vars/config.sample.yaml Co-authored-by: Manuel Rüger <manuel@rueg.eu> * Update template/tasks/verify_cli.yaml * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> * Update README.md Co-authored-by: Manuel Rüger <manuel@rueg.eu> * fix: move bcrypt logic to template Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: derp Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa> Co-authored-by: Manuel Rüger <manuel@rueg.eu>
2023-07-04 11:36:58 -04:00
1 parent 26164c7278
commit de0ed1c70a
@@ -0,0 +1,35 @@
+[defaults]
+# General settings
+nocows                      = True
+executable                  = /bin/bash
+stdout_callback             = yaml
+force_valid_group_names     = ignore
+# File/Directory settings
+log_path                    = ~/.ansible/ansible.log
+inventory                   = ./inventory
+roles_path                  = ~/.ansible/roles:./roles
+collections_path            = ~/.ansible/collections
+remote_tmp                  = ~/.ansible/tmp
+local_tmp                   = ~/.ansible/tmp
+# Fact Caching settings
+fact_caching                = jsonfile
+fact_caching_connection     = ~/.ansible/facts_cache
+# SSH settings
+remote_port                 = 22
+timeout                     = 60
+host_key_checking           = False
+# Plugin settings
+vars_plugins_enabled        = host_group_vars,community.sops.sops
+
+[inventory]
+unparsed_is_failed          = True
+
+[privilege_escalation]
+become                      = True
+
+[ssh_connection]
+scp_if_ssh                  = smart
+retries                     = 3
+ssh_args                    = -o ControlMaster=auto -o ControlPersist=30m -o Compression=yes -o ServerAliveInterval=15s
+pipelining                  = True
+control_path                = %(directory)s/%%h-%%r
@@ -29,7 +29,7 @@
        k3s_state: installed

    - name: Kubeconfig
-      ansible.builtin.include_tasks: tasks/kubeconfig.yml
+      ansible.builtin.include_tasks: tasks/kubeconfig.yaml

    - name: Wait for custom manifests to rollout
      when:
@@ -58,20 +58,20 @@
        - k3s_primary_control_node
        - (k3s_server_manifests_templates | length > 0
            or k3s_server_manifests_urls | length > 0)
-      ansible.builtin.include_tasks: tasks/coredns.yml
+      ansible.builtin.include_tasks: tasks/coredns.yaml

    - name: Cilium
      when:
        - k3s_primary_control_node
        - (k3s_server_manifests_templates | length > 0
            or k3s_server_manifests_urls | length > 0)
-      ansible.builtin.include_tasks: tasks/cilium.yml
+      ansible.builtin.include_tasks: tasks/cilium.yaml

    - name: Cruft
      when: k3s_primary_control_node
-      ansible.builtin.include_tasks: tasks/cruft.yml
+      ansible.builtin.include_tasks: tasks/cruft.yaml

    - name: Stale Containers
-      ansible.builtin.include_tasks: tasks/stale_containers.yml
+      ansible.builtin.include_tasks: tasks/stale_containers.yaml
      vars:
        stale_containers_state: enabled
@@ -63,7 +63,7 @@
        k3s_state: uninstalled

    - name: Stale Containers
-      ansible.builtin.include_tasks: tasks/stale_containers.yml
+      ansible.builtin.include_tasks: tasks/stale_containers.yaml
      vars:
        stale_containers_state: disabled

@@ -17,7 +17,7 @@ spec:
    image:
      repository: registry.k8s.io/coredns/coredns
      tag: v1.10.1
-    replicaCount: 3
+    replicaCount: 1
    service:
      # Choose the 10th IP address from the start of the service-cidr
      clusterIP: {{ k3s_server['service-cidr'] | ansible.utils.nthhost(10) }}
@@ -1,15 +1,15 @@
 ---
 collections:
-  - name: community.general
-    version: 7.1.0
-  - name: community.sops
-    version: 1.6.4
  - name: ansible.posix
    version: 1.5.4
  - name: ansible.utils
    version: 2.10.3
+  - name: community.general
+    version: 7.1.0
  - name: kubernetes.core
    version: 2.4.0
+  - name: community.sops
+    version: 1.6.4
 roles:
  - name: xanmanning.k3s
    src: https://github.com/PyratLabs/ansible-role-k3s.git