unkinben
c39caeb8bb
ci/woodpecker/pr/ruby-validate Pipeline was successful
ci/woodpecker/pr/puppet-lint Pipeline was successful
ci/woodpecker/pr/yamllint Pipeline was successful
ci/woodpecker/pr/bolt-validate Pipeline was successful
ci/woodpecker/pr/erb-validate Pipeline was successful
ci/woodpecker/pr/epp-validate Pipeline was successful
ci/woodpecker/pr/ruby-check Pipeline was successful
ci/woodpecker/pr/puppet-validate Pipeline was canceled
New el9_8 nodes boot rke2 v1.33.11 (flannel v0.28.4 / calico v3.31.5) from the rolling latest/1.33 repo, but the airgap preload pinned v1.33.4 (flannel v0.27.2 / calico v3.30.2), so canal's images were never on disk and containerd fell back to the artifactapi mirror VIP, which is unreachable until the flannel overlay it would provide is up. Classic bootstrap deadlock. - bump pinned rke2_version 1.33.4 -> 1.33.11 so the versionlock, RPM and preloaded bundle all match the canal image tags the running binary requests (the default rke2-images bundle already contains the canal CNI images) - wire the airgap archive source to the container_archive_source parameter (previously declared but unused) and refresh its default to the artifactapi github remote, so the pre-CNI-reachable source is hiera-overridable per node Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
54 lines
1.7 KiB
Puppet
54 lines
1.7 KiB
Puppet
# install rke2
|
|
class rke2::install (
|
|
Enum['server', 'agent'] $node_type = $rke2::node_type,
|
|
String $rke2_version = $rke2::rke2_version,
|
|
String $rke2_release = $rke2::rke2_release,
|
|
Stdlib::HTTPUrl $container_archive_source = $rke2::container_archive_source,
|
|
){
|
|
|
|
# versionlock rke2
|
|
yum::versionlock{"rke2-${node_type}":
|
|
ensure => present,
|
|
version => "${rke2_version}~${rke2_release}",
|
|
}
|
|
|
|
# install rke2
|
|
package {"rke2-${node_type}":
|
|
ensure => "${rke2_version}~${rke2_release}",
|
|
}
|
|
|
|
# ensure images path exists
|
|
file { ['/var/lib/rancher/rke2/agent', '/var/lib/rancher/rke2/agent/images']:
|
|
ensure => 'directory',
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0750',
|
|
require => Package["rke2-${node_type}"],
|
|
before => Service["rke2-${node_type}"],
|
|
}
|
|
|
|
# preload the airgap bundle (has the default canal CNI images) so canal starts from disk, not the mirror VIP that needs flannel first
|
|
archive { '/var/lib/rancher/rke2/agent/images/rke2-images.linux-amd64.tar.zst':
|
|
ensure => present,
|
|
source => "${container_archive_source}/v${rke2_version}%2B${rke2_release}/rke2-images.linux-amd64.tar.zst",
|
|
require => [
|
|
Package["rke2-${node_type}"],
|
|
File['/var/lib/rancher/rke2/agent/images'],
|
|
],
|
|
before => Service["rke2-${node_type}"],
|
|
}
|
|
|
|
# ensure the images cache file exists
|
|
file {'/var/lib/rancher/rke2/agent/images/.cache.json':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
require => [
|
|
Package["rke2-${node_type}"],
|
|
File['/var/lib/rancher/rke2/agent/images'],
|
|
],
|
|
before => Service["rke2-${node_type}"],
|
|
}
|
|
}
|