mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-02-16 02:30:03 -03:30
25cb90bc2d
* project: update all dependencies including ansible Upgrade to ansible 7.x and ansible-core 2.14.x. There seems to be issue with ansible 8/ansible-core 2.15 so we remain on those versions for now. It's quite a big bump already anyway. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * tests: install aws galaxy collection Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * ansible-lint: disable various rules after ansible upgrade Temporarily disable a bunch of linting action following ansible upgrade. Those should be taken care of separately. Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve deprecated-module ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve no-free-form ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[meta] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[playbook] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve schema[tasks] ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve risky-file-permissions ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve risky-shell-pipe ansible-lint error Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: remove deprecated warn args Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: use fqcn for non builtin tasks Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: resolve syntax-check[missing-file] for contrib playbook Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> * project: use arithmetic inside jinja to fix ansible 6 upgrade Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch> --------- Signed-off-by: Arthur Outhenin-Chalandre <arthur.outhenin-chalandre@proton.ch>
47 lines
1.1 KiB
YAML
47 lines
1.1 KiB
YAML
---
|
|
- name: Load br_netfilter module
|
|
community.general.modprobe:
|
|
name: br_netfilter
|
|
state: present
|
|
register: br_netfilter
|
|
|
|
- name: Add br_netfilter into /etc/modules
|
|
lineinfile:
|
|
dest: /etc/modules
|
|
state: present
|
|
line: 'br_netfilter'
|
|
when: br_netfilter is defined and ansible_os_family == 'Debian'
|
|
|
|
- name: Add br_netfilter into /etc/modules-load.d/kubespray.conf
|
|
copy:
|
|
dest: /etc/modules-load.d/kubespray.conf
|
|
content: |-
|
|
### This file is managed by Ansible
|
|
br-netfilter
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
when: br_netfilter is defined
|
|
|
|
|
|
- name: Enable net.ipv4.ip_forward in sysctl
|
|
ansible.posix.sysctl:
|
|
name: net.ipv4.ip_forward
|
|
value: 1
|
|
sysctl_file: "{{ sysctl_file_path }}"
|
|
state: present
|
|
reload: yes
|
|
|
|
- name: Set bridge-nf-call-{arptables,iptables} to 0
|
|
ansible.posix.sysctl:
|
|
name: "{{ item }}"
|
|
state: present
|
|
value: 0
|
|
sysctl_file: "{{ sysctl_file_path }}"
|
|
reload: yes
|
|
with_items:
|
|
- net.bridge.bridge-nf-call-arptables
|
|
- net.bridge.bridge-nf-call-ip6tables
|
|
- net.bridge.bridge-nf-call-iptables
|
|
when: br_netfilter is defined
|