add: ansible k8s_node role

ansible/kubernetes/roles/k8s_node/tasks/system.yml

@@ -0,0 +1,51 @@
+---
+- name: Disable swap
+  ansible.builtin.shell:
+    cmd: swapoff -a
+  become: yes
+  changed_when: false
+
+- name: Comment out swap entries in fstab
+  ansible.builtin.replace:
+    path: /etc/fstab
+    regexp: '^(\s*[^#\s][^\s]*\s+swap\s+.*)$'
+    replace: '# \1'
+  become: yes
+
+- name: Load overlay kernel module
+  ansible.builtin.shell:
+    cmd: modprobe overlay
+  become: yes
+  changed_when: false
+  failed_when: false
+
+- name: Load br_netfilter kernel module
+  ansible.builtin.shell:
+    cmd: modprobe br_netfilter
+  become: yes
+  changed_when: false
+
+- name: Persist kernel modules
+  ansible.builtin.copy:
+    dest: /etc/modules-load.d/k8s.conf
+    content: |
+      overlay
+      br_netfilter
+    mode: "0644"
+  become: yes
+
+- name: Configure kernel network settings
+  ansible.builtin.copy:
+    dest: /etc/sysctl.d/k8s.conf
+    content: |
+      net.bridge.bridge-nf-call-iptables  = 1
+      net.bridge.bridge-nf-call-ip6tables = 1
+      net.ipv4.ip_forward                 = 1
+    mode: "0644"
+  become: yes
+
+- name: Apply kernel network settings
+  ansible.builtin.command:
+    cmd: sysctl --system
+  become: yes
+  changed_when: false