MichaelFisher1997
e447795395
The kubernetes.core.helm module requires helm CLI to be installed on the target node. Added check and install step using the official helm install script.
83 lines
2.3 KiB
YAML
83 lines
2.3 KiB
YAML
---
|
|
- name: Check if hcloud secret exists
|
|
command: kubectl -n kube-system get secret hcloud
|
|
register: hcloud_secret_check
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: Fail if hcloud secret is missing
|
|
fail:
|
|
msg: "hcloud secret not found in kube-system namespace. CCM requires it."
|
|
when: hcloud_secret_check.rc != 0
|
|
|
|
- name: Check if helm is installed
|
|
command: which helm
|
|
register: helm_check
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: Install helm
|
|
when: helm_check.rc != 0
|
|
block:
|
|
- name: Download helm install script
|
|
get_url:
|
|
url: https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3
|
|
dest: /tmp/get-helm-3.sh
|
|
mode: "0755"
|
|
|
|
- name: Run helm install script
|
|
command: /tmp/get-helm-3.sh
|
|
args:
|
|
creates: /usr/local/bin/helm
|
|
|
|
- name: Add Hetzner Helm repository
|
|
kubernetes.core.helm_repository:
|
|
name: hcloud
|
|
repo_url: https://charts.hetzner.cloud
|
|
kubeconfig: /etc/rancher/k3s/k3s.yaml
|
|
environment:
|
|
KUBECONFIG: /etc/rancher/k3s/k3s.yaml
|
|
|
|
- name: Deploy Hetzner Cloud Controller Manager
|
|
kubernetes.core.helm:
|
|
name: hcloud-cloud-controller-manager
|
|
chart_ref: hcloud/hcloud-cloud-controller-manager
|
|
release_namespace: kube-system
|
|
create_namespace: true
|
|
values:
|
|
networking:
|
|
enabled: true
|
|
nodeSelector:
|
|
kubernetes.io/hostname: "{{ inventory_hostname }}"
|
|
additionalTolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
kubeconfig: /etc/rancher/k3s/k3s.yaml
|
|
wait: true
|
|
wait_timeout: 300s
|
|
environment:
|
|
KUBECONFIG: /etc/rancher/k3s/k3s.yaml
|
|
|
|
- name: Wait for CCM to be ready
|
|
command: kubectl -n kube-system rollout status deployment/hcloud-cloud-controller-manager --timeout=120s
|
|
changed_when: false
|
|
register: ccm_rollout
|
|
until: ccm_rollout.rc == 0
|
|
retries: 3
|
|
delay: 10
|
|
|
|
- name: Pause to ensure CCM is fully ready to process new nodes
|
|
pause:
|
|
seconds: 10
|
|
|
|
- name: Verify CCM is removing uninitialized taints
|
|
command: kubectl get nodes -o jsonpath='{.items[*].spec.taints[?(@.key=="node.cloudprovider.kubernetes.io/uninitialized")].key}'
|
|
register: uninitialized_taints
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: Display taint status
|
|
debug:
|
|
msg: "Nodes with uninitialized taint: {{ uninitialized_taints.stdout }}"
|