Roles

Eleven roles under stage1/roles/. Ten are named directly in site.yml; kubeadm_node is not. It arrives as a meta dependency.

flowchart TD
    p2["Play 2: cluster"]:::aux
    p3["Play 3: server"]:::aux
    p4["Play 4: agent"]:::aux
    p6["Play 6: localhost"]:::aux

    hostsetup["host_setup"]
    tsnode["tailscale_node"]
    kpre["kubeadm_pre_setup"]
    kserver["kubeadm_server"]
    kagent["kubeadm_agent"]
    knode["kubeadm_node"]:::shared
    k3spre["k3s_pre_setup"]
    k3ssrv["k3s_server"]
    mpre["minikube_pre_setup"]
    msrv["minikube_server"]
    post["localhost_post_setup"]

    p2 --> hostsetup
    p2 --> tsnode
    p3 -->|"kubeadm"| kpre
    p3 -->|"kubeadm"| kserver
    p3 -->|"k3s"| k3spre
    p3 -->|"k3s"| k3ssrv
    p3 -->|"minikube"| mpre
    p3 -->|"minikube"| msrv
    p4 --> kpre
    p4 --> kagent
    p6 --> post
    kserver -.->|"meta dependency"| knode
    kagent -.->|"meta dependency"| knode

    classDef shared stroke:#b9770e,stroke-width:2px
    classDef aux stroke:#78909c,stroke-dasharray:2 2

Catalog

Role	Invoked by	Tags	Task files excl. main.yml	Defaults
host_setup	play 2	host_setup, packages, network, storage, security, system	10	39
tailscale_node	play 2	tailscale_node	0	12
kubeadm_pre_setup	plays 3, 4	bootstrap, system_upgrade	1	0
kubeadm_node	meta dependency of kubeadm_server and kubeadm_agent	always, container_runtime, container_tools, k8s_install	12	5
kubeadm_server	play 3, play 5	kubeadm, k8s_upgrade, k8s_install, cni, k8s_config, kubeconfig	14	2
kubeadm_agent	play 4	kubeadm_agent, k8s_upgrade	1	5
localhost_post_setup	play 6	post_setup, kubeconfig, network, monitoring	3	0
k3s_pre_setup	play 3	k3s	0	3
k3s_server	play 3	k3s	0	8
minikube_pre_setup	play 3	minikube, container_runtime	1	0
minikube_server	play 3	minikube	3	1

Only the kubeadm path supports workers, rolling upgrades and Cilium. The k3s and minikube roles provision a control plane and stop there.

Reading a role page

Each page follows the same shape:

• Purpose: what the role owns
• Invoked by: which play, under which tag and condition
• Task files: in execution order, which is not alphabetical order
• Variables: from defaults/main.yml, overridable through the environment
• Handlers notified
• Re-run behaviour: what happens on a second run
• Gotchas: the things that will bite you