.devcontainer
 ├─ devcontainer.json
 └─ dev.dockerfile

 1{
 2    "dockerFile": "dev.dockerfile",
 3    "postAttachCommand": "chmod 755 /workspaces/PiKubernetes/ansible",
 4    "customizations": {
 5        "vscode": {
 6            "extensions": [
 7				"redhat.ansible",
 8				"ms-azuretools.vscode-docker"
 9			]
10        }        
11    }
12}

 1FROM ubuntu:22.04
 2
 3# Set the timezone
 4ENV TZ=Etc/UTC
 5RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
 6
 7# Install packages and set the UK locale
 8RUN DEBIAN_FRONTEND=noninteractive apt-get update && \
 9    apt-get install -y python3-pip ansible vim sshpass locales && \
10    locale-gen en_GB.UTF-8 && \
11    pip3 install ansible-lint
12
13# Set the locale environment variables
14ENV LANG en_GB.UTF-8
15ENV LANGUAGE en_GB:en
16ENV LC_ALL en_GB.UTF-8

1[defaults]
2host_key_checking = false
3inventory = hosts.ini

 1[raspberry_pis]
 2pi-1 ansible_host=192.168.0.1 ansible_user=myuser
 3pi-2 ansible_host=192.168.0.2 ansible_user=myuser
 4pi-3 ansible_host=192.168.0.3 ansible_user=myuser
 5
 6[raspberry_pi_masters]
 7pi-1
 8
 9[raspberry_pi_workers]
10pi-2
11pi-3
12
13[all:vars]
14node_token_dest="/tmp/ansible/node-token.txt"

 1---
 2- name: Bootstrap the Raspberry Pi ready for k3s
 3  hosts: raspberry_pis
 4  become: true
 5  tasks:
 6    - name: Update repositories cache
 7      ansible.builtin.apt:
 8        update_cache: true
 9        cache_valid_time: 3600
10
11    - name: Upgrade all packages to the latest version
12      ansible.builtin.apt:
13        upgrade: true
14
15    - name: Install Packages
16      ansible.builtin.apt:
17        pkg:
18          # We have to install this to fix this issue - https://github.com/k3s-io/k3s/issues/5423, https://github.com/k3s-io/k3s/issues/4234
19          - linux-modules-extra-raspi
20
21    - name: Disable UFW
22      community.general.ufw:
23        state: disabled

 1# K3s provides an installation script that is a convenient way to install it as a service on systemd or openrc based systems.
 2# This script is available at https://get.k3s.io
 3# After running this installation:
 4# - The K3s service will be configured to automatically restart after node reboots or if the process crashes or is killed
 5# - Additional utilities will be installed, including kubectl, crictl, ctr, k3s-killall.sh, and k3s-uninstall.sh
 6# - A kubeconfig file will be written to /etc/rancher/k3s/k3s.yaml and the kubectl installed by K3s will automatically use it
 7# curl -sfL https://get.k3s.io | sh -
 8---
 9- name: Configure Master Nodes
10  hosts: raspberry_pi_masters
11  become: true
12  tasks:
13    - name: Download k3s installer script
14      ansible.builtin.get_url:
15        url: https://get.k3s.io
16        dest: "/tmp/k3s_install.sh"
17        mode: '0755'
18
19    - name: Execute k3s installer script
20      ansible.builtin.command: "/tmp/k3s_install.sh --disable traefik"
21      changed_when: true
22
23    - name: Read node-token from master
24      ansible.builtin.slurp:
25        path: "/var/lib/rancher/k3s/server/node-token"
26      register: node_token
27
28    - name: Print node_token
29      ansible.builtin.debug:
30        var: node_token.content | b64decode
31
32    - name: Ensure directory exists
33      ansible.builtin.file:
34        path: "{{ node_token_dest | dirname }}"
35        state: directory
36        mode: '0755'
37
38    - name: Save node_token to file
39      ansible.builtin.copy:
40        content: "{{ node_token.content | b64decode }}"
41        dest: "{{ node_token_dest }}"
42
43    - name: Copy file from remote host to Ansible controller
44      ansible.builtin.fetch:
45        src: "{{ node_token_dest }}"
46        dest: "{{ node_token_dest }}"
47        flat: yes
48        validate_checksum: yes
49
50    - name: Read kubeconfig
51      ansible.builtin.slurp:
52        path: "/etc/rancher/k3s/k3s.yaml"
53      register: kubeconfig
54
55    - name: Print kubeconfig
56      ansible.builtin.debug:
57        var: kubeconfig.content | b64decode
58
59    - name: Install Nginx Ingress Bare Metal
60      ansible.builtin.command: "kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.8.1/deploy/static/provider/baremetal/deploy.yaml"
61      changed_when: true

 1# K3s provides an installation script that is a convenient way to install it as a service on systemd or openrc based systems.
 2# This script is available at https://get.k3s.io
 3# After running this installation:
 4# - The K3s service will be configured to automatically restart after node reboots or if the process crashes or is killed
 5# - Additional utilities will be installed, including kubectl, crictl, ctr, k3s-killall.sh, and k3s-uninstall.sh
 6# - A kubeconfig file will be written to /etc/rancher/k3s/k3s.yaml and the kubectl installed by K3s will automatically use it
 7# curl -sfL https://get.k3s.io | sh -
 8---
 9- name: Configure Worker Nodes
10  hosts: raspberry_pi_workers
11  become: true
12  tasks:
13    - name: Download k3s installer script
14      ansible.builtin.get_url:
15        url: https://get.k3s.io
16        dest: "/tmp/k3s_install.sh"
17        mode: '0755'
18
19    - name: Read node-token from master
20      ansible.builtin.set_fact:
21        k3s_token: "{{ lookup('file', node_token_dest) }}"
22
23    - name: Print the contents of K3S_TOKEN
24      ansible.builtin.debug:
25        msg: "{{ k3s_token }}"
26
27    - name: Execute k3s installer script
28      ansible.builtin.command: "/tmp/k3s_install.sh"
29      environment:
30        K3S_TOKEN: "{{ k3s_token }}"
31        K3S_URL: https://192.168.0.1:6443
32      changed_when: true

ansible-playbook bootstrap-pi.yml --ask-pass --ask-become-pass
ansible-playbook setup-master.yml --ask-pass --ask-become-pass
ansible-playbook setup-workers.yml --ask-pass --ask-become-pass