panxiao81andClaude Opus 5.5
55bb5be8b6
从旧工作区 chore/recover-old-workspace 清理时保存，内容与 2026-09-17
stash@{0} 快照中的版本一致；未合并、未在 main 上使用，仅作参考，不开 PR。
被 gitignore 的 tfstate 与凭据文件不在此分支，仍留在本地工作区。
Co-Authored-By: Claude Opus 5.5 <[email protected]>
89 lines
2.8 KiB
YAML
89 lines
2.8 KiB
YAML
---
|
|
- name: Install Kata Containers in the disposable k3s lab
|
|
hosts: kata-lab
|
|
gather_facts: false
|
|
vars:
|
|
kata_version: "4.1.0"
|
|
kata_chart_url: >-
|
|
https://github.com/kata-containers/kata-containers/releases/download/{{ kata_version }}/kata-deploy-{{ kata_version }}.tgz
|
|
tasks:
|
|
- name: Check nested KVM is usable
|
|
ansible.builtin.stat:
|
|
path: /dev/kvm
|
|
register: kata_kvm
|
|
|
|
- name: Require nested KVM
|
|
ansible.builtin.assert:
|
|
that:
|
|
- kata_kvm.stat.exists
|
|
- kata_kvm.stat.ischr
|
|
fail_msg: /dev/kvm is unavailable; Kata QEMU cannot start efficiently
|
|
|
|
- name: Install Kata through the k3s Helm controller
|
|
ansible.builtin.copy:
|
|
dest: /var/lib/rancher/k3s/server/manifests/kata-deploy.yaml
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
content: |
|
|
apiVersion: helm.cattle.io/v1
|
|
kind: HelmChart
|
|
metadata:
|
|
name: kata-deploy
|
|
namespace: kube-system
|
|
spec:
|
|
chart: {{ kata_chart_url }}
|
|
targetNamespace: kata-system
|
|
createNamespace: true
|
|
timeout: 15m
|
|
failurePolicy: abort
|
|
valuesContent: |-
|
|
deploymentMode: job
|
|
k8sDistribution: k3s
|
|
snapshotter:
|
|
setup: []
|
|
shims:
|
|
disableAll: true
|
|
qemu-runtime-rs:
|
|
enabled: true
|
|
runtimeClasses:
|
|
enabled: true
|
|
createDefault: true
|
|
node-feature-discovery:
|
|
enabled: false
|
|
|
|
- name: Wait for the Helm installation job to appear
|
|
ansible.builtin.command:
|
|
cmd: k3s kubectl get job/helm-install-kata-deploy -n kube-system
|
|
register: kata_helm_job
|
|
retries: 60
|
|
delay: 2
|
|
until: kata_helm_job.rc == 0
|
|
changed_when: false
|
|
|
|
- name: Wait for the Helm installation job to finish
|
|
ansible.builtin.command:
|
|
cmd: >-
|
|
k3s kubectl wait --for=condition=complete
|
|
job/helm-install-kata-deploy -n kube-system --timeout=20m
|
|
changed_when: false
|
|
|
|
- name: Wait for Kata node installation jobs
|
|
ansible.builtin.shell:
|
|
cmd: |
|
|
set -euo pipefail
|
|
jobs=$(k3s kubectl get jobs -n kata-system -l app.kubernetes.io/instance=kata-deploy -o name)
|
|
test -n "${jobs}"
|
|
k3s kubectl wait --for=condition=complete -n kata-system $jobs --timeout=20m
|
|
executable: /bin/bash
|
|
changed_when: false
|
|
|
|
- name: Wait for the default Kata RuntimeClass
|
|
ansible.builtin.command:
|
|
cmd: k3s kubectl get runtimeclass kata
|
|
register: kata_runtime_class
|
|
retries: 30
|
|
delay: 2
|
|
until: kata_runtime_class.rc == 0
|
|
changed_when: false
|