Enable ClearLinux as a distro in kubespray (#3855)

Signed-off-by: Ganesh Maharaj Mahalingam <ganesh.mahalingam@intel.com>

roles/container-engine/cri-o/tasks/main.yaml

@@ -24,6 +24,14 @@
     gpgcheck: no
   when: ansible_distribution in ["CentOS","RedHat"] and not is_atomic
 
+- name: Make sure needed folders exist in the system
+  with_items:
+    - /etc/crio
+    - /etc/containers
+  file:
+    path: "{{ item }}"
+    state: directory
+
 - name: Install cri-o packages
   package:
     name: "{{ item }}"

roles/container-engine/cri-o/templates/crio.conf.j2

@@ -107,7 +107,11 @@ selinux = {{ (preinstall_selinux_state == 'enforcing')|lower }}
 
 # seccomp_profile is the seccomp json profile path which is used as the
 # default for the runtime.
+{% if ansible_os_family == "ClearLinux" %}
+seccomp_profile = "/usr/share/defaults/crio/seccomp.json"
+{% else %}
 seccomp_profile = "/etc/crio/seccomp.json"
+{% endif %}
 
 # apparmor_profile is the apparmor profile name which is used as the
 # default for the runtime.
@@ -199,7 +203,11 @@ pause_command = "/pause"
 # use when deciding whether or not to trust an image that we've pulled.
 # Outside of testing situations, it is strongly advised that this be left
 # unspecified so that the default system-wide policy will be used.
+{% if ansible_os_family == "ClearLinux" %}
+signature_policy = "/usr/share/defaults/crio/policy.json"
+{% else %}
 signature_policy = ""
+{% endif %}
 
 # image_volumes controls how image volumes are handled.
 # The valid values are mkdir and ignore.

roles/container-engine/cri-o/vars/clearlinux.yml

@@ -0,0 +1,5 @@
+---
+crio_packages:
+  - containers-basic
+
+crio_service: crio