Devin BuhlandManuel Rüger
de0ed1c70a
* feat: smol changes Signed-off-by: Devin Buhl <devin@buhl.casa> * feat!: Rewrite configure script in ansible Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: add comment for real path Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: verification is done Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: do not need net common Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up old comments Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up old comments Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: finish up ansible host generation and more Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: backup/restore sops config between tasks Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up test comments Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: use ansible template on template Signed-off-by: Devin Buhl <devin@buhl.casa> * Update template/vars/config.sample.yaml Co-authored-by: Manuel Rüger <manuel@rueg.eu> * Update template/tasks/verify_cli.yaml * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> * Update README.md Co-authored-by: Manuel Rüger <manuel@rueg.eu> * fix: move bcrypt logic to template Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: derp Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa> Co-authored-by: Manuel Rüger <manuel@rueg.eu>
74 lines
2.1 KiB
YAML
74 lines
2.1 KiB
YAML
---
|
|
- name: Cluster Nuke
|
|
hosts: all
|
|
become: true
|
|
gather_facts: true
|
|
any_errors_fatal: true
|
|
vars_prompt:
|
|
- name: nuke
|
|
prompt: |-
|
|
Are you sure you want to nuke this cluster?
|
|
Type 'YES I WANT TO DESTROY THIS CLUSTER' to proceed
|
|
default: "n"
|
|
private: false
|
|
pre_tasks:
|
|
- name: Check for confirmation
|
|
ansible.builtin.fail:
|
|
msg: Aborted nuking the cluster
|
|
when: nuke != 'YES I WANT TO DESTROY THIS CLUSTER'
|
|
|
|
- name: Pausing for 5 seconds...
|
|
ansible.builtin.pause:
|
|
seconds: 5
|
|
tasks:
|
|
- name: Stop Kubernetes # noqa: ignore-errors
|
|
ignore_errors: true
|
|
block:
|
|
- name: Stop Kubernetes
|
|
ansible.builtin.include_role:
|
|
name: xanmanning.k3s
|
|
public: true
|
|
vars:
|
|
k3s_state: stopped
|
|
|
|
# https://github.com/k3s-io/docs/blob/main/docs/installation/network-options.md
|
|
- name: Networking
|
|
block:
|
|
- name: Networking | Delete Cilium links
|
|
ansible.builtin.command:
|
|
cmd: "ip link delete {{ item }}"
|
|
removes: "/sys/class/net/{{ item }}"
|
|
loop: ["cilium_host", "cilium_net", "cilium_vxlan"]
|
|
- name: Networking | Flush iptables
|
|
ansible.builtin.iptables:
|
|
table: "{{ item }}"
|
|
flush: true
|
|
loop: ["filter", "nat", "mangle", "raw"]
|
|
- name: Networking | Flush ip6tables
|
|
ansible.builtin.iptables:
|
|
table: "{{ item }}"
|
|
flush: true
|
|
ip_version: ipv6
|
|
loop: ["filter", "nat", "mangle", "raw"]
|
|
- name: Networking | Delete CNI directory
|
|
ansible.builtin.file:
|
|
path: /etc/cni/net.d
|
|
state: absent
|
|
|
|
- name: Uninstall Kubernetes
|
|
ansible.builtin.include_role:
|
|
name: xanmanning.k3s
|
|
public: true
|
|
vars:
|
|
k3s_state: uninstalled
|
|
|
|
- name: Stale Containers
|
|
ansible.builtin.include_tasks: tasks/stale_containers.yaml
|
|
vars:
|
|
stale_containers_state: disabled
|
|
|
|
- name: Reboot
|
|
ansible.builtin.reboot:
|
|
msg: Rebooting nodes
|
|
reboot_timeout: 3600
|