5bc3024eaf
Deploys kube-vip as a DaemonSet on all k3s server nodes, advertising a VIP (192.168.20.2) via ARP. Eliminates the single-point-of-failure k3s-loadbalancer VM. - New kube_vip role: RBAC + DaemonSet templates, TLS SAN cert rotation - playbooks/kube-vip.yaml: migration playbook (serial=1, idempotent) - Updated k3s install tasks (server primary/secondary, agent) to use k3s_vip instead of the loadbalancer VM IP - Added k3s_vip: 192.168.20.2 to group_vars (below DHCP range .11-.250) Migration steps in playbook header comment.
22 lines
620 B
YAML
22 lines
620 B
YAML
---
|
|
- name: Add token vault
|
|
ansible.builtin.include_vars:
|
|
file: "{{ playbook_dir }}/{{ k3s_server_token_vault_file }}"
|
|
name: k3s_token_vault
|
|
|
|
- name: Download K3s install script to /tmp/
|
|
ansible.builtin.get_url:
|
|
url: https://get.k3s.io
|
|
dest: /tmp/k3s_install.sh
|
|
mode: "0755"
|
|
|
|
- name: Install K3s on the secondary servers
|
|
ansible.builtin.command: |
|
|
/tmp/k3s_install.sh \
|
|
--server "https://{{ k3s_vip }}:{{ k3s.loadbalancer.default_port }}" \
|
|
--tls-san {{ k3s_vip }} \
|
|
--tls-san {{ k3s_server_name }}
|
|
environment:
|
|
K3S_TOKEN: "{{ k3s_token_vault.k3s_token }}"
|
|
become: true
|