From 858e36bcfdd3423e213c771de4f865411ade7956 Mon Sep 17 00:00:00 2001
From: File Magic <file_magic@protonmail.com>
Date: Sat, 1 Aug 2026 17:24:55 -0400
Subject: [PATCH] site.yml [kubernetes/ansible]: wait for apiserver readiness
 before Cilium install

---
 kubernetes/ansible/site.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/kubernetes/ansible/site.yml b/kubernetes/ansible/site.yml
index 915ef00..53996ad 100644
--- a/kubernetes/ansible/site.yml
+++ b/kubernetes/ansible/site.yml
@@ -6,6 +6,22 @@
     - name: Import wait-ssh tasks
       ansible.builtin.import_tasks: tasks/wait-ssh.yml
 
+- name: Wait for Kubernetes API server
+  hosts: master
+  gather_facts: false
+  vars_files:
+    - group_vars/all.yml
+  tasks:
+    - name: Wait for apiserver readiness (certs generated by cfssl at boot)
+      ansible.builtin.command: kubectl get --raw /readyz
+      environment:
+        KUBECONFIG: /etc/kubernetes/cluster-admin.kubeconfig
+      register: apiserver_ready
+      until: apiserver_ready.rc == 0
+      retries: 60
+      delay: 5
+      changed_when: false
+
 - name: Install Cilium CNI
   hosts: master
   gather_facts: false
-- 
2.51.2