Run monkey-patched proxy so that kubeadm can join

Author: Adrià Garriga-Alonso

roles/kubernetes/kubeadm/tasks/main.yml

@@ -69,6 +69,19 @@
     - not kubelet_conf.stat.exists
     - kubeadm_use_file_discovery
 
+- name: nginx proxy | start with containerd
+  command: >-
+    ctr --namespace=k8s.io run
+    --net-host
+    --snapshotter=zfs
+    -d
+    --mount type=bind,src={{ nginx_config_dir }},dst=/etc/nginx,options=rbind:ro
+    {{ nginx_image_repo }}:{{ nginx_image_tag }}
+    nginx
+  when:
+    - not kubelet_conf.stat.exists
+    - container_manager == 'containerd'
+
 - name: Create kubeadm client config
   template:
     src: "kubeadm-client.conf.j2"
@@ -203,3 +216,18 @@
     - inventory_hostname not in groups['kube_control_plane']
     - kube_network_plugin in ["calico", "flannel", "cilium"] or cilium_deploy_additionally
     - kube_network_plugin != "calico" or calico_datastore == "etcd"
+
+# Cleanup the nginx proxy that we created earlier on to bootstrap kubelet, so that it can start
+- name: nginx proxy | stop container
+  command: ctr --namespace=k8s.io task delete -f nginx
+  when:
+    - not kubelet_conf.stat.exists
+    - container_manager == 'containerd'
+  ignore_errors: yes
+
+- name: nginx proxy | delete container
+  command: ctr --namespace=k8s.io container rm nginx
+  when:
+    - not kubelet_conf.stat.exists
+    - container_manager == 'containerd'
+  ignore_errors: yes