updated docs and fixed things (#684)

* updated docs and fixed things

* Update main.yml

Author: aedan

ansible/playbooks/setup-kubernetes.yml

@@ -121,3 +121,12 @@
   until: install_packages is success
   retries: 5
   delay: 2
+
+# this is added to remove conflicts with systemd-timesyncd and ntpsec with kubespray installation
+- name: Ensure conflicting time synchronization packages are removed
+  package:
+    name:
+      - ntpsec
+      - systemd-timesyncd
+    state: absent
+    purge: yes

ansible/roles/host_setup/tasks/main.yml

@@ -46,8 +46,6 @@ spec:
       storageClassName: general
 
   replicas: 3
-  podSecurityContext:
-    runAsUser: 0
 
   replication:
     enabled: true

base-kustomize/mariadb-cluster/base/mariadb-replication.yaml

@@ -108,24 +108,7 @@ ansible-playbook host-setup.yml
 
     ``` shell
     cd /opt/genestack/submodules/kubespray
-    ansible-playbook --inventory /etc/genestack/inventory/openstack-flex-inventory.ini \
-                    --private-key /home/ubuntu/.ssh/openstack-flex-keypair.key \
-                    --user ubuntu \
-                    --become \
-                    cluster.yml
-    ```
-
-=== "Setup-Kubernetes Playbook _(Experimental)_"
-
-    The `private-key` option can be used to instruct ansible to use a custom SSH key for the SSH connection
-
-    ``` shell
-        --private-key ${HOME}/.ssh/openstack-keypair.key
-    ```
-
-    ``` shell
-    source /opt/genestack/scripts/genestack.rc
-    ansible-playbook setup-kubernetes.yml
+    ansible-playbook cluster.yml
     ```
 
 !!! tip

docs/k8s-kubespray.md

@@ -17,7 +17,6 @@ Make sure you label things accordingly.
 | <div style="width:220px">key</div> | type | <div style="width:128px">value</div>  | notes |
 |:-----|--|:----------------:|:------|
 | **role** | str | `storage-node` | The "role" is general purpose, and currently only used when deploying the ceph cluster with rook |
-| **vault-storage** | str | `enabled` | Defines which nodes to deploy vault on |
 | **openstack-control-plane** | str| `enabled` | Defines which nodes will run the OpenStack Control Plane |
 | **openstack-compute-node** | str|`enabled` | Defines which nodes will run OpenStack Compute |
 | **openstack-network-node** | str|`enabled` | Defines which nodes will run OpenStack Networking |
@@ -32,9 +31,6 @@ Make sure you label things accordingly.
     # Label the storage nodes - optional and only used when deploying ceph for K8S infrastructure shared storage
     kubectl label node $(kubectl get nodes | awk '/ceph/ {print $1}') role=storage-node
 
-    # Label the HashiCorp Vault nodes
-    kubectl label node $(kubectl get nodes | awk '/controller/ {print $1}' |head -3) vault-storage=enabled
-
     # Label the openstack controllers
     kubectl label node $(kubectl get nodes | awk '/controller/ {print $1}') openstack-control-plane=enabled