Revert "Drop linux capabilities and rework users/groups"

roles/kubernetes/preinstall/tasks/main.yml

@@ -23,12 +23,6 @@
 - include: set_facts.yml
   tags: facts
 
-- include: set_resolv_facts.yml
-  tags: [bootstrap-os, resolvconf, facts]
-
-- include: set_uid_facts.yml
-  tags: [bootstrap-os, facts]
-
 - name: gather os specific variables
   include_vars: "{{ item }}"
   with_first_found:
@@ -48,7 +42,7 @@
   file:
     path: "{{ kube_config_dir }}"
     state: directory
-    owner: "{{ kubelet_user }}"
+    owner: kube
   when: "{{ inventory_hostname in groups['k8s-cluster'] }}"
   tags: [kubelet, k8s-secrets, kube-controller-manager, kube-apiserver, bootstrap-os, apps, network, master, node]
 
@@ -56,7 +50,7 @@
   file:
     path: "{{ kube_script_dir }}"
     state: directory
-    owner: "{{ kubelet_user }}"
+    owner: kube
   when: "{{ inventory_hostname in groups['k8s-cluster'] }}"
   tags: [k8s-secrets, bootstrap-os]
 
@@ -64,7 +58,7 @@
   file:
     path: "{{ kube_manifest_dir }}"
     state: directory
-    owner: "{{ kubelet_user }}"
+    owner: kube
   when: "{{ inventory_hostname in groups['k8s-cluster'] }}"
   tags: [kubelet, bootstrap-os, master, node]
 
@@ -86,7 +80,7 @@
   file:
     path: "{{ item }}"
     state: directory
-    owner: "{{ kubelet_user }}"
+    owner: kube
   with_items:
     - "/etc/cni/net.d"
     - "/opt/cni/bin"

roles/kubernetes/preinstall/tasks/set_facts.yml

@@ -51,3 +51,6 @@
     etcd_container_bin_dir: "{% if etcd_after_v3 %}/usr/local/bin/{% else %}/{% endif %}"
 - set_fact:
     peer_with_calico_rr: "{{ 'calico-rr' in groups and groups['calico-rr']|length > 0 }}"
+
+- include: set_resolv_facts.yml
+  tags: [bootstrap-os, resolvconf, facts]

roles/kubernetes/preinstall/tasks/set_uid_facts.yml

@@ -1,32 +0,0 @@
----
-- name: Preinstall | get kube user ID
-  shell: /usr/bin/id -u {{ kubelet_user }} || echo 0
-  register: kube_uid
-
-- name: Preinstall | get kube group ID
-  shell: /usr/bin/id -g {{ kubelet_group }} || echo 0
-  register: kube_gid
-
-- name: Preinstall | get kube cert group ID
-  shell: /usr/bin/id -g {{ kube_cert_group }} || echo 0
-  register: kube_cert_gid
-
-- name: Preinstall | get etcd cert group ID
-  shell: /usr/bin/id -g {{ etcd_cert_group }} || echo 0
-  register: etcd_cert_gid
-
-- name: Preinstall | get netplug user ID
-  shell: /usr/bin/id -u {{ netplug_user }} || echo 0
-  register: netplug_uid
-
-- name: Preinstall | get netplug group ID
-  shell: /usr/bin/getent group {{ netplug_group }} | cut -d':' -f3 || echo 0
-  register: netplug_gid
-
-- set_fact:
-    kubelet_user_id: "{{ kube_uid.stdout }}"
-    kubelet_group_id: "{{ kube_gid.stdout }}"
-    kube_cert_group_id: "{{ kube_cert_gid.stdout }}"
-    etcd_cert_group_id: "{{ etcd_cert_gid.stdout }}"
-    netplug_user_id: "{{ netplug_uid.stdout }}"
-    netplug_group_id: "{{ netplug_gid.stdout }}"