Some Fedora/single master fixes

Author: garutilorenzo

tasks/init_cluster.yml

@@ -8,14 +8,15 @@
 - set_fact:
     kubernetes_init: "{% if kubernetes_init_host is defined and  kubernetes_init_host == inventory_hostname %}yes{% else %}no{% endif %}"
 
+- set_fact:
+    kubernetes_api_port: "{% if setup_vip %}{{ kubernetes_api_ha_port }}{% else %}{{ kubernetes_api_default_port }}{% endif %}"
+
+- set_fact:
+    kubernetes_ip_address: "{{ item }}"
+  when: "item | ipaddr( kubernetes_subnet )"
+  with_items: "{{ ansible_all_ipv4_addresses | difference([kubernetes_vip_ip]) }}"
+
 - block:
-    - set_fact:
-        kubernetes_api_port: "{% if setup_vip %}{{ kubernetes_api_ha_port }}{% else %}{{ kubernetes_api_default_port }}{% endif %}"
-    
-    - set_fact:
-        kubernetes_ip_address: "{{ item }}"
-      when: "item | ipaddr( kubernetes_subnet )"
-      with_items: "{{ ansible_all_ipv4_addresses | difference([kubernetes_vip_ip]) }}"
 
     - set_fact:
         kubernetes_iface: "{{ hostvars[inventory_hostname]['ansible_' + item ]['device'] }}"

tasks/install_cri.yml

@@ -34,13 +34,57 @@
       notify:
         - reload containerd
 
-    - name: reload containerd
+    - name: start and enable containerd
       ansible.builtin.systemd:
         name: containerd
         state: started
         enabled: yes
 
   when: kubernetes_cri == 'containerd'
 
+# Fedora hack
+- name: Check if /opt/cni/bin directory exist
+  ansible.builtin.stat:
+    path: /opt/cni/bin
+  register: cni_bin_dir
+
+- block:
+    - name: Install containernetworking-plugins
+      ansible.builtin.package:
+        name: containernetworking-plugins
+        state: present
+
+    - name: stop containerd
+      ansible.builtin.systemd:
+        name: containerd
+        state: stopped
+
+    - name: Create /opt/cni/ directory
+      ansible.builtin.file: 
+        name: /opt/cni/
+        state: directory
+
+    - name: Remove /opt/cni/bin directory if exist
+      ansible.builtin.file: 
+        name: /opt/cni/bin
+        state: removed
+
+    - name: Create symlink from /usr/libexec/cni to /opt/cni/bin
+      ansible.builtin.file:
+        src: /usr/libexec/cni
+        dest: /opt/cni/bin
+        state: link
+
+    - name: start containerd
+      ansible.builtin.systemd:
+        name: containerd
+        state: started
+  when: 
+    - ansible_distribution == 'Fedora'
+    - kubernetes_cri == 'containerd'
+    - cni_bin_dir.stat.islnk is defined
+    - not cni_bin_dir.stat.islnk
+# END Fedora hack
+
 - name: Force all notified handlers to run now
   meta: flush_handlers

tasks/join_cluster.yml

@@ -6,7 +6,7 @@
   register: kubelet_dir
 
 - set_fact:
-    api_server_endpoint: "{% if groups['kubemaster'] | length > 1 %}{{ kubernetes_vip_ip }}{% else %}{{ hostvars[groups['kubemaster'][0]]['ansible_default_ipv4']['address'] }}{% endif %}"
+    api_server_endpoint: "{% if groups['kubemaster'] | length > 1 %}{{ kubernetes_vip_ip }}{% else %}{{ hostvars[groups['kubemaster'][0]]['kubernetes_ip_address'] }}{% endif %}"
     kubernetes_api_port: "{% if setup_vip %}{{ kubernetes_api_ha_port }}{% else %}{{ kubernetes_api_default_port }}{% endif %}"
 
 - name: "wait for kubeapi server"

tasks/main.yml

@@ -24,6 +24,8 @@
     - "setup_repo_{{ ansible_os_family }}.yml"
   tags: repo
 
+- setup:
+
 - include_tasks: 
     file: preflight.yml
     apply:

tasks/preflight.yml

@@ -10,13 +10,13 @@
   when: ansible_os_family == 'Debian'
 
 - block:
-    - name: Install required system packages
+    - name: Install iptables-legacy
       ansible.builtin.dnf: 
         name: 
           - iptables-legacy
         state: present
 
-    - name: Install required system packages
+    - name: Remove zram-generator-defaults
       ansible.builtin.dnf: 
         name: 
           - zram-generator-defaults
@@ -39,6 +39,12 @@
         state: disabled
   when: ansible_os_family == 'RedHat'
 
+- name: Install openssl
+  ansible.builtin.package: 
+    name: 
+      - openssl
+    state: present
+
 - name: load overlay kernel module
   ansible.builtin.command: modprobe overlay