491e260d20
* feat(): Add wireguard backend to flannel cni As described in the flannel docs: https://github.com/flannel-io/flannel/blob/master/Documentation/backends.md#wireguard This does not support optional configuration methods like: - setting a psk (will be autogenerated by default) - chang listening ports - change mode (defaults to 'separate') - change PersistentKeepaliveInterval (defaults to 0) * Add supported backends to flannel docs * Fix markdown in docs
21 lines
673 B
YAML
21 lines
673 B
YAML
---
|
|
|
|
- name: Flannel | Stop if kernel version is too low for Flannel Wireguard encryption
|
|
assert:
|
|
that: ansible_kernel.split('-')[0] is version('5.6.0', '>=')
|
|
when:
|
|
- kube_network_plugin == 'flannel'
|
|
- flannel_backend_type == 'wireguard'
|
|
- not ignore_assert_errors
|
|
|
|
- name: Flannel | Create Flannel manifests
|
|
template:
|
|
src: "{{ item.file }}.j2"
|
|
dest: "{{ kube_config_dir }}/{{ item.file }}"
|
|
mode: 0644
|
|
with_items:
|
|
- {name: flannel, file: cni-flannel-rbac.yml, type: sa}
|
|
- {name: kube-flannel, file: cni-flannel.yml, type: ds}
|
|
register: flannel_node_manifests
|
|
when:
|
|
- inventory_hostname == groups['kube_control_plane'][0]
|