{"id":50900610,"url":"https://github.com/grycap/ansible-role-interlink","last_synced_at":"2026-06-16T02:04:15.805Z","repository":{"id":360492502,"uuid":"1250097085","full_name":"grycap/ansible-role-interlink","owner":"grycap","description":"This ansible role installs Interlink in an Slurm and Kuberentes cluster","archived":false,"fork":false,"pushed_at":"2026-06-04T18:18:08.000Z","size":23,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-06-04T21:10:19.439Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Jinja","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/grycap.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-05-26T09:53:20.000Z","updated_at":"2026-06-02T10:15:52.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/grycap/ansible-role-interlink","commit_stats":null,"previous_names":["grycap/ansible-role-interlink"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/grycap/ansible-role-interlink","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grycap%2Fansible-role-interlink","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grycap%2Fansible-role-interlink/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grycap%2Fansible-role-interlink/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grycap%2Fansible-role-interlink/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/grycap","download_url":"https://codeload.github.com/grycap/ansible-role-interlink/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grycap%2Fansible-role-interlink/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34387478,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-16T02:00:06.860Z","response_time":126,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-06-16T02:04:15.221Z","updated_at":"2026-06-16T02:04:15.799Z","avatar_url":"https://github.com/grycap.png","language":"Jinja","funding_links":[],"categories":[],"sub_categories":[],"readme":"# ansible-role-interlink\n\nAnsible role to install and configure InterLink components for Slurm and Kubernetes.\n\nThe role supports two execution modes:\n\n- `interlink_type_of_node: slurm`: installs InterLink API + Slurm plugin, generates mTLS certificates, and exports client artifacts.\n- `interlink_type_of_node: kubernetes`: deploys the InterLink Virtual Kubelet via Helm using artifacts generated in Slurm mode.\n\n## What This Role Does\n\n### Slurm mode\n\n- Installs required packages (`ca-certificates`, `curl`, `jq`, `openssl`).\n- Creates InterLink directories under `interlink_base_dir`.\n- Downloads InterLink binaries and installs them under `interlink_base_dir/bin`.\n- Generates CA/server/client mTLS certificates with `community.crypto`.\n- Templates InterLink and Slurm plugin configuration files.\n- Templates and manages systemd units:\n  - `interlink-api.service`\n  - `interlink-slurm-plugin.service`\n- Validates local mTLS endpoint (`/pinglink`).\n- Exports Kubernetes client cert artifacts to:\n  - `{{ interlink_artifact_dir }}/ca.crt`\n  - `{{ interlink_artifact_dir }}/tls.crt`\n  - `{{ interlink_artifact_dir }}/tls.key`\n\n### Kubernetes mode\n\n- Verifies mTLS artifacts exist on the Ansible controller.\n- Copies artifacts to target host (`interlink_remote_cert_dir`).\n- Ensures namespace exists.\n- Creates or updates TLS secret for Virtual Kubelet.\n- Templates Helm values and installs/upgrades InterLink chart from GHCR OCI.\n- Waits for rollout.\n- Finds and approves pending kubelet-serving CSRs for the InterLink service account.\n- Waits for Virtual Kubelet node Ready.\n- Optionally runs smoke test pod (`interlink_run_smoke_test: true`).\n\n## Requirements\n\n- Ansible \u003e= `2.12`\n- Collection:\n  - `community.crypto`\n- External tools expected on target hosts:\n  - Slurm mode: `curl`, `openssl`, `jq` (installed by role), systemd available.\n  - Kubernetes mode: `kubectl`, `helm`, `jq` available in PATH.\n- Access to Kubernetes admin kubeconfig (`kubeconfig_path`, default `/etc/kubernetes/admin.conf`).\n\n## Role Variables\n\nDefaults are defined in `defaults/main.yml`.\n\n### Core mode and identity\n\n- `interlink_type_of_node` (default: `kubernetes`): `kubernetes` or `slurm`.\n- `type_of_node`: backward-compatible alias.\n- `interlink_namespace` (default: `interlink`)\n- `interlink_node_name` (default: `interlink-slurm-vk`)\n- `interlink_run_smoke_test` (default: `false`)\n\n### Paths and runtime\n\n- `interlink_base_dir` (default: `/opt/interlink`)\n- `interlink_data_dir` (default: `{{ interlink_base_dir }}/data`)\n- `interlink_work_dir` (default: `{{ interlink_base_dir }}/work`)\n- `interlink_home_dir` (default: `{{ interlink_base_dir }}/home`)\n- `interlink_artifact_dir` (default: `{{ playbook_dir }}/artifacts/{{ interlink_node_name }}`)\n- `interlink_remote_cert_dir` (default: `/tmp/{{ interlink_node_name }}-certs`)\n- `kubeconfig_path` (default: `/etc/kubernetes/admin.conf`)\n\n### Versions and image\n\n- `interlink_version` (default: `0.6.1-patch1`)\n- `interlink_slurm_plugin_version` (default: `0.6.1`)\n- `interlink_chart_version` (default: `0.6.1`)\n- `virtual_kubelet_image` (default: `ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:0.6.1-patch1`)\n\n### Capacity and resource settings\n\n- `virtual_node_cpu` (default: `1`)\n- `virtual_node_memory_gib` (default: `1`)\n- `virtual_node_pods` (default: `10`)\n- `virtual_kubelet_cpu_request` (default: `100m`)\n- `virtual_kubelet_cpu_limit` (default: `500m`)\n- `virtual_kubelet_memory_request` (default: `128Mi`)\n- `virtual_kubelet_memory_limit` (default: `512Mi`)\n\n### Slurm defaults\n\n- `slurm_partition` (default: `debug`)\n- `slurm_default_cpu` (default: `1`)\n- `slurm_default_memory` (default: `1G`)\n- `slurm_job_time` (default: `00:10:00`)\n\n## Recommended Deployment Flow\n\nRun the role in two phases:\n\n1. Execute with `interlink_type_of_node: slurm` on your Slurm-side host.\n2. Execute with `interlink_type_of_node: kubernetes` on your Kubernetes-side host.\n\nThe Kubernetes phase consumes artifacts exported by the Slurm phase from `interlink_artifact_dir`.\n\n## Example Playbook: Slurm\n\n```yaml\n- name: Deploy InterLink on Slurm host\n  hosts: slurm_frontend\n  become: true\n  roles:\n    - role: grycap.interlink\n      vars:\n        interlink_type_of_node: slurm\n        interlink_node_name: interlink-slurm-vk\n```\n\n## Example Playbook: Kubernetes\n\n```yaml\n- name: Deploy InterLink Virtual Kubelet on Kubernetes host\n  hosts: k8s_frontend\n  become: true\n  roles:\n    - role: grycap.interlink\n      vars:\n        interlink_type_of_node: kubernetes\n        interlink_node_name: interlink-slurm-vk\n        interlink_namespace: interlink\n        interlink_run_smoke_test: true\n```\n\n## Dependency Role\n\n`meta/main.yml` declares a conditional dependency:\n\n- `usegalaxy_eu.apptainer` when running in Slurm mode.\n\n## Troubleshooting\n\n- Error about missing mTLS artifacts in Kubernetes mode:\n  - Run Slurm mode first, then verify files exist in `interlink_artifact_dir`.\n- CSR approval does not happen:\n  - Verify `jq` is installed and the service account name matches `system:serviceaccount:\u003cnamespace\u003e:\u003cinterlink_node_name\u003e`.\n- Helm install/upgrade fails:\n  - Verify `helm` supports OCI and can access `ghcr.io`.\n\n## License\n\nApache-2.0\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgrycap%2Fansible-role-interlink","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgrycap%2Fansible-role-interlink","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgrycap%2Fansible-role-interlink/lists"}