Run monkey-patched proxy so that kubeadm can join

Author: mattpallissard

roles/kubernetes/kubeadm/tasks/main.yml

@@ -74,6 +74,18 @@
     - not kubelet_conf.stat.exists or not cluster_info_discovery_kubeconfig.stat.exists
     - kubeadm_use_file_discovery
 
+- name: nginx proxy | start with containerd
+  command: >-
+    ctr --namespace=k8s.io run
+    --net-host
+    -d
+    --mount type=bind,src={{ nginx_config_dir }},dst=/etc/nginx,options=rbind:ro
+    {{ nginx_image_repo }}:{{ nginx_image_tag }}
+    nginx
+  when:
+    - not kubelet_conf.stat.exists
+    - container_manager == 'containerd'
+
 - name: Create kubeadm client config
   template:
     src: "kubeadm-client.conf.j2"
@@ -209,3 +221,18 @@
     - kube_network_plugin in ["calico", "flannel", "cilium"] or cilium_deploy_additionally
     - kube_network_plugin != "calico" or calico_datastore == "etcd"
     - kube_network_plugin != "cilium" or cilium_identity_allocation_mode != 'crd'
+
+# Cleanup the nginx proxy that we created earlier on to bootstrap kubelet, so that it can start
+- name: nginx proxy | stop container
+  command: ctr --namespace=k8s.io task delete -f nginx
+  when:
+    - not kubelet_conf.stat.exists
+    - container_manager == 'containerd'
+  ignore_errors: yes
+
+- name: nginx proxy | delete container
+  command: ctr --namespace=k8s.io container rm nginx
+  when:
+    - not kubelet_conf.stat.exists
+    - container_manager == 'containerd'
+  ignore_errors: yes