feat: adding rke2

- manage rke2 repos
- add rke2 module (init, params, install, config, service)
- split roles::infra::k8s::node -> control/compute roles
- moved common k8s config into k8s.yaml
- add bootstrap_node, manage server and token fields in rke2 config
- manage install of helm
- manage node attributes (from puppet facts)
- manage frr exclusions for service/cluster network

hieradata/roles/infra/k8s/control.yaml

@@ -7,6 +7,10 @@ rke2::helm_repos:
   rancher-stable: https://releases.rancher.com/server-charts/stable
 rke2::extra_config_files:
   - rke2-canal-config
+#  - rke2-cilium-config
+#  - rke2-metallb-pools
+#  - rke2-metallb-bgppeers
+#  - rke2-metallb-bgpadvertisements
 rke2::config_hash:
   advertise-address: "%{hiera('networking_loopback0_ip')}"
   cluster-domain: "svc.k8s.unkin.net"

modules/rke2/files/rke2-cilium-config.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: helm.cattle.io/v1
+kind: HelmChartConfig
+metadata:
+  name: rke2-cilium
+  namespace: kube-system
+spec:
+  valuesContent: |-
+    hubble:
+      enabled: true
+      relay:
+        enabled: true
+      ui:
+        enabled: true

modules/rke2/files/rke2-metallb-bgpadvertisements.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: metallb.io/v1beta1
+kind: BGPAdvertisement
+metadata:
+  name: au-syd1
+  namespace: metallb-system
+spec:
+  ipAddressPools:
+  - common-pool
+  - dmz-pool
+  aggregationLength: 32
+  peers:
+  - au-syd1-gw1
+  nodeSelectors:
+  - matchLabels:
+      country: au
+      region: syd1

modules/rke2/files/rke2-metallb-bgppeers.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: metallb.io/v1beta2
+kind: BGPPeer
+metadata:
+  name: au-syd1-gw1
+  namespace: metallb-system
+spec:
+  myASN: 64513
+  peerASN: 64512
+  peerAddress: 198.18.21.160
+  peerPort: 179
+  nodeSelectors:
+  - matchLabels:
+      country: au
+      region: syd1

modules/rke2/files/rke2-metallb-pools.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: metallb.io/v1beta1
+kind: IPAddressPool
+metadata:
+  name: common-pool
+  namespace: metallb-system
+spec:
+  addresses:
+  - 198.18.200.0/24
+---
+apiVersion: metallb.io/v1beta1
+kind: IPAddressPool
+metadata:
+  name: dmz-pool
+  namespace: metallb-system
+spec:
+  addresses:
+  - 198.18.199.0/24