mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-10-30 22:16:23 -02:30
Kay Yan
e19d1c9a55
* Enable AlmaLinux 8 and Rocky Linux 8 Calico CI Install Python 3.12 with yum before gathering facts when the interpreter selected by Ansible is missing or older than Python 3.9, and add bootstrap_os_install_python to control distribution-specific Python bootstrap installation. EL8 only ships the libselinux Python bindings for the distribution Python 3.6, so ansible.posix.selinux fails once Kubespray runs with Python 3.12. Keep using the module when the bindings are importable and otherwise set the policy in /etc/selinux/config and apply the runtime state with setenforce. Enable rockylinux8-calico in regular PR CI, add almalinux8-calico as a manual job, and document the RHEL 8 family lifecycle. Signed-off-by: Kay Yan <kay.yan@daocloud.io> * Fix EL8 containerd compatibility and SELinux runtime transitions Signed-off-by: Kay Yan <kay.yan@daocloud.io> --------- Signed-off-by: Kay Yan <kay.yan@daocloud.io>
36 lines
1012 B
YAML
36 lines
1012 B
YAML
---
|
|
# Flatcar Container Linux ships without Python installed
|
|
|
|
- name: Check if bootstrap is needed
|
|
raw: stat /opt/bin/.bootstrapped
|
|
register: need_bootstrap
|
|
failed_when: false
|
|
changed_when: false
|
|
tags:
|
|
- facts
|
|
|
|
- name: Run bootstrap.sh
|
|
script: bootstrap.sh
|
|
become: true
|
|
environment: "{{ proxy_env }}"
|
|
when:
|
|
- bootstrap_os_install_python
|
|
- need_bootstrap.rc != 0
|
|
|
|
# Workaround ansible https://github.com/ansible/ansible/pull/82821
|
|
# We set the interpreter rather than ansible_python_interpreter to allow
|
|
# - using virtual env with task level ansible_python_interpreter later
|
|
# - let users specify an ansible_python_interpreter in group_vars
|
|
|
|
- name: Make interpreter discovery works on Flatcar
|
|
set_fact:
|
|
ansible_interpreter_python_fallback: "{{ (ansible_interpreter_python_fallback | default([])) + ['/opt/bin/python'] }}"
|
|
|
|
- name: Disable auto-upgrade
|
|
systemd_service:
|
|
name: locksmithd.service
|
|
masked: true
|
|
state: stopped
|
|
when:
|
|
- coreos_locksmithd_disable
|