---

- name: upgrade all packages
  yum:
    name: '*'
    state: latest

- name: permanently disable selinux
  lineinfile:
    dest: /etc/sysconfig/selinux
    regexp: "^SELINUX="
    line: "SELINUX=disabled"

- name: temporarily disable swap
  shell: swapoff -a

- name: permanently disable swap
  lineinfile:
    dest: /etc/fstab
    regexp: "^/dev/mapper/centos-swap"
    line: "# /dev/mapper/centos-swap swap swap defaults 0 0"

- name: activate kernel module
  shell: modprobe br_netfilter

- name: enable bridge-nf-call-iptables
  sysctl:
    name: net.bridge.bridge-nf-call-iptables
    value: 1
    sysctl_set: yes
    state: present
    reload: yes

- name: enable bridge-nf-call-ip6tables
  sysctl: 
    name: net.bridge.bridge-nf-call-ip6tables
    value: 1
    sysctl_set: yes
    state: present
    reload: yes

- name: enable ipv6 default forwarding
  sysctl:
    name: net.ipv6.conf.default.forwarding
    value: 1
    sysctl_set: yes
    state: present
    reload: yes

- name: add docker-ce yum repository
  shell: yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo


- name: copy kubernetes repo config
  copy:
    src: ../files/kubernetes.repo
    dest: /etc/yum.repos.d/kubernetes.repo

- name: create cni config directory
  file:
    path: /etc/cni/net.d
    state: directory

# TODO: this
# - name: copy cni config
#   template: 
#     src: "../files/####CNI CONFIG####"
#     dest: /etc/cni/net.d/####CNI CONFIG####
#     owner: root
#     group: root
#   with_items: "{{ kubernetes }}"

- name: install packages
  yum:
    name:
    - yum-utils
    - device-mapper-persistent-data
    - lvm2
    - docker-ce
    - kubelet
    - kubeadm
    - kubectl
    - kubernetes-cni
    state: present

- name: set cgroup
  lineinfile:
    dest: /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
    regexp: "^cgroup-driver="
    line: "cgroup-driver=cgroupfs"

- name: force systemd to reread configs and restart service docker
  systemd:
    name: docker
    enabled: yes
    state: restarted

- name: force systemd to reread configs and restart service kubelet
  systemd:
    name: kubelet
    enabled: yes
    state: restarted
    daemon_reload: yes

- name: reboot
  reboot: