open-developer-experience-kits/single_node_network_edge.yml at main · IntelSmartEdge/open-developer-experience-kits · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
# SPDX-License-Identifier: Apache-2.0
# Copyright (c) 2020-2021 Intel Corporation

---
# Playbook for single node Network Edge cluster deployment

- hosts: edgenode_group
  pre_tasks:
    - name: set node name
      set_fact: node_name={{ ansible_nodename | lower }}
    - name: create helper variable
      set_fact:
        single_node_deployment: true
    - name: check deployment settings
      include_tasks: ./tasks/settings_check_ne.yml
    - name: check deployment settings for single node deployment
      include_tasks: ./tasks/settings_check_ne_single_node.yml
    - name: print deployment settings
      include_tasks: ./tasks/print_vars.yml
    - name: Set global variables for baseline ansible
      set_fact:
        project_user: "{{ ansible_user }}"
    - name: check raw drive status
      include_tasks: ./tasks/ssd_check.yml
      when: rook_ceph_enabled | default(False)
  handlers:
    - import_tasks: "{{ playbook_dir }}/tasks/reboot_server.yml"
  roles:
    - role: infrastructure/setup_baseline_ansible
    - role: infrastructure/build_noproxy
    - role: baseline_ansible/infrastructure/os_proxy
    - role: baseline_ansible/infrastructure/time_setup_ntp
      when: ntp_enable | default(False)
    - role: infrastructure/os_setup
    - role: infrastructure/check_redeployment
    - role: baseline_ansible/infrastructure/install_rt_package
      when: kernel_rt_enable | default(False)
    - role: infrastructure/install_hwe_kernel
    - role: baseline_ansible/infrastructure/configure_sriov_kernel_flags
      when: "iommu_enabled | default(True)"
    - role: baseline_ansible/infrastructure/configure_hugepages
      when: "hugepages_enabled | default(False)"
    - role: baseline_ansible/infrastructure/configure_cpu_idle_driver
      when: "cpu_idle_driver_setup_enabled | default(False)"
    - role: baseline_ansible/infrastructure/configure_cpu_isolation
      when: "isolcpus_enabled | default(False)"
    - role: baseline_ansible/infrastructure/configure_additional_grub_parameters
      when: "additional_grub_parameters_enabled | default(False)"
    - role: infrastructure/conditional_reboot
    - role: infrastructure/e810_driver_update
      when: e810_driver_enable | default(False)
    - role: infrastructure/provision_sgx_enabled_platform
      when: sgx_enabled | default(False)

    - role: baseline_ansible/infrastructure/install_golang
      golang_additional_exports:
        - "export GOPRIVATE=github.com/smart-edge-open"

    - role: infrastructure/git_repo_tool
      when: "platform_attestation_controller | default(False) or platform_attestation_node | default(False)"

    - role: infrastructure/docker

- hosts: controller_group
  pre_tasks:
    - name: set node name
      set_fact: node_name={{ ansible_nodename | lower }}
    - name: create helper variable
      set_fact:
        single_node_deployment: true
  handlers:
    - import_tasks: "{{ playbook_dir }}/tasks/reboot_server.yml"
  roles:
    - role: infrastructure/setup_baseline_ansible
    - role: infrastructure/build_noproxy
    - role: kubernetes/install
    - role: kubernetes/customize_kubelet
    - role: kubernetes/controlplane
    - role: kubernetes/helm
    - role: kubernetes/cni
    - role: kubernetes/cert_manager
    - role: kubernetes/harbor_registry/controlplane
      when: "harbor_registry_enable | default(True)"
    - role: kubernetes/create_namespaces
    - role: kubernetes/default_netpol
    - role: kubernetes/nfd
      when: ne_nfd_enable | default(True)
    - role: kubernetes/sgx_device_plugin
      when: sgx_enabled | default(True)
    - role: kubernetes/kubevirt
      when: kubevirt_enable | default(False)

    - role: infrastructure/device_sriov_detection
      when: "sriov_network_operator_enable and sriov_network_operator_configure_enable and sriov_network_detection_application_enable | default(True)"
    - role: baseline_ansible/kubernetes/operator/sriov_network_operator/prepare_node
      reference_host: "{{ groups['controller_group'][0] }}"
      when: "sriov_network_operator_enable | default(False)"
    - role: baseline_ansible/kubernetes/operator/sriov_network_operator/install
      when: "sriov_network_operator_enable | default(False)"
    - role: baseline_ansible/kubernetes/operator/sriov_network_operator/configure
      when: "sriov_network_operator_enable and sriov_network_operator_configure_enable | default(False)"

    - role: kubernetes/rook_ceph
      when: rook_ceph_enabled | default(False)

- name: Provision security components
  import_playbook: playbooks/security.yml

- name: Provision telemetry components
  import_playbook: playbooks/telemetry.yml
  when: telemetry_enable | default(True)