---
- name: Init
  become: true
  hosts: all

  tasks:
  - name: Copy conf
    copy:
      src: rootfs/
      dest: /

  - name: Restart sshd
    service:
      name: sshd.service
      state: restarted

  - name: SSH port 40022
    set_fact:
      ansible_port: 40022

  - name: Add {{ codename }} repo
    deb822_repository:
      name: debian
      types: deb
      uris: http://deb.debian.org/debian
      suites: "{{ codename }} {{ codename }}-updates {{ codename }}-backports"
      components:
        - main
        - non-free-firmware

  - name: Add {{ codename }}-security repo
    deb822_repository:
      name: debian-security
      types: deb
      uris: http://security.debian.org/debian-security/
      suites: "{{ codename }}-security"
      components:
        - main
        - non-free-firmware

  - name: Add libcontainers repo (CRI-O)
    deb822_repository:
      name: libcontainers
      types: deb
      uris: "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/{{ os }}/"
      suites: /
      signed_by: "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/{{ os }}/Release.key"

  - name: Add libcontainers-crio repo (CRI-O)
    deb822_repository:
      name: libcontainers-crio
      types: deb
      uris: "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/{{ k8s_version }}/{{ os }}/"
      suites: /
      signed_by: "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/{{ k8s_version }}/{{ os }}/Release.key"

  - name: Add k8s repo
    deb822_repository:
      name: k8s
      types: deb
      uris: "https://pkgs.k8s.io/core:/stable:/v{{ k8s_version }}/deb/"
      suites: /
      signed_by: "https://pkgs.k8s.io/core:/stable:/v{{ k8s_version }}/deb/Release.key"

  - name: Upgrade
    apt:
      update_cache: true
      upgrade: dist
      autoremove: true
      purge: true

  - name: Install pkgs
    apt:
      install_recommends: false
      name:
        - ceph
        - ceph-common
        - cri-o
        - cri-o-runc
        - cri-tools
        - cron
        - iptables-persistent
        - kubeadm
        - kubectl
        - kubectx
        - kubelet
        - vim

  - name: Enable crio service
    service:
      name: crio.service
      enabled: true

  - name: Reboot
    reboot: