5bc3024eaf
Deploys kube-vip as a DaemonSet on all k3s server nodes, advertising a VIP (192.168.20.2) via ARP. Eliminates the single-point-of-failure k3s-loadbalancer VM. - New kube_vip role: RBAC + DaemonSet templates, TLS SAN cert rotation - playbooks/kube-vip.yaml: migration playbook (serial=1, idempotent) - Updated k3s install tasks (server primary/secondary, agent) to use k3s_vip instead of the loadbalancer VM IP - Added k3s_vip: 192.168.20.2 to group_vars (below DHCP range .11-.250) Migration steps in playbook header comment.
15 lines
360 B
YAML
15 lines
360 B
YAML
---
|
|
- name: Download K3s install script to /tmp/
|
|
ansible.builtin.get_url:
|
|
url: https://get.k3s.io
|
|
dest: /tmp/k3s_install.sh
|
|
mode: "0755"
|
|
|
|
- name: Install K3s server with and TLS SAN
|
|
ansible.builtin.command: |
|
|
/tmp/k3s_install.sh server \
|
|
--cluster-init \
|
|
--tls-san {{ k3s_vip }} \
|
|
--tls-san {{ k3s_server_name }}
|
|
become: true
|