feat: add kubernetes roles

.vscode/extensions.json

@@ -2,6 +2,7 @@
   "recommendations": [
     "EditorConfig.EditorConfig",
     "opentofu.vscode-opentofu",
-    "skellock.just"
+    "skellock.just",
+    "redhat.ansible"
   ]
 }

ansible/inventories/incus/incus.yaml

@@ -3,3 +3,6 @@ plugin: community.general.incus
 strict: true
 remotes:
   - local:home-infrastructure
+groups:
+  control_planes: "'master' in inventory_hostname"
+  workers: "'worker' in inventory_hostname"

ansible/roles/common/tasks/main.yaml

@@ -1,3 +1,3 @@
 ---
-- name: Install required provision packages
+- name: Install required packages
   ansible.builtin.import_tasks: packages.yaml

ansible/roles/common/tasks/packages.yaml

@@ -1,5 +1,6 @@
 ---
-- name: Upgrade all packages
+- name: Install Python 3 Dependencies
-  ansible.builtin.package:
+  ansible.builtin.apt:
-    name: '*'
+    pkg:
-    state: latest
+      - python3-debian
+    state: present

ansible/roles/kubernetes_node/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- name: Install Kubernetes APT repository
+  ansible.builtin.import_tasks: repo.yaml
+
+- name: Install Kubernetes packages
+  ansible.builtin.import_tasks: packages.yaml
+
+- name: Configure networking
+  ansible.builtin.import_tasks: networking.yaml

ansible/roles/kubernetes_node/tasks/networking.yaml

@@ -0,0 +1,6 @@
+---
+- name: Enable sysctl 'net.ipv4.ip_forward'
+  ansible.posix.sysctl:
+    name: net.ipv4.ip_forward
+    value: 1
+    sysctl_set: true

ansible/roles/kubernetes_node/tasks/packages.yaml

@@ -0,0 +1,14 @@
+---
+- name: Install Kubernetes packages
+  ansible.builtin.apt:
+    pkg:
+      - kubeadm
+      - kubelet
+      - containerd
+    update_cache: true
+
+- name: Activate containerd service
+  ansible.builtin.service:
+    name: containerd
+    enabled: true
+    state: started

ansible/roles/kubernetes_node/tasks/repo.yaml

@@ -0,0 +1,9 @@
+---
+- name: Add Kubernetes APT repository
+  ansible.builtin.deb822_repository:
+    name: kubernetes
+    types: deb
+    uris: https://pkgs.k8s.io/core:/stable:/v1.36/deb/
+    suites: /
+    signed_by: https://pkgs.k8s.io/core:/stable:/v1.36/deb/Release.key
+    state: present

ansible/site.yaml

@@ -1,5 +1,10 @@
 ---
-- name: Common
+- name: Bootstrap
   hosts: all
   roles:
     - common
+
+- name: Setup Kubernetes nodes
+  hosts: all
+  roles:
+    - kubernetes_node

infra/main.tofu

@@ -7,8 +7,8 @@ locals {
   ext_disk_size  = "16GiB"
   network_cidr   = "10.150.0.1/24"
 
-  master_count = 2
+  master_count = 1
-  worker_count = 0
+  worker_count = 1
 
   image = "ubuntu/26.04"
 }